Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the recHour parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31168 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the mode parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31167 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the hour parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31166 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the dhcpMtu parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31163 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the ttlWay parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31162 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunPort parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31179 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun_user parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31176 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Critical9.8An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunEnable parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31175 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the informEnable parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31174 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the user parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31172 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the url parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31171 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeServiceName parameter to /cgi…CVE-2026-31165 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the pppoeMtu parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31164 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the provider parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31160 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
Medium6.5An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the password parameter to /cgi-bin/cstecgi.cgi.CVE-2026-31159 · totolink · a3300r firmware · CVE.org · NIST NVDApr 23, 2026
High8.9WWBN AVideo is an open source video platform.CVE-2026-41304 · wwbn · avideo · CVE.org · NIST NVDApr 22, 2026
Low2.1A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1.CVE-2026-6799 · CVE.org · NIST NVDApr 21, 2026
Critical9.8Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPartitionName parameter.CVE-2026-38835 · tenda · w30e firmware · CVE.org · NIST NVDApr 21, 2026
High7.3Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do_ping_action function via the hostName parameter.CVE-2026-38834 · tenda · w30e firmware · CVE.org · NIST NVDApr 21, 2026
High7.4Lawnchair is a free, open-source home app for Android.CVE-2026-39866 · lawnchair · lawnchair · CVE.org · NIST NVD · AndroidApr 21, 2026
High7.2OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary co…CVE-2026-4048 · progress · connection manager for objectscale · CVE.org · NIST NVDApr 20, 2026
High7.2OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execu…CVE-2026-3519 · progress · connection manager for objectscale · CVE.org · NIST NVDApr 20, 2026
High7.2OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary c…CVE-2026-3518 · progress · connection manager for objectscale · CVE.org · NIST NVDApr 20, 2026
High7.2OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to exec…CVE-2026-3517 · progress · connection manager for objectscale · CVE.org · NIST NVDApr 20, 2026
Low2.1A vulnerability was determined in liangliangyy DjangoBlog up to 2.1.0.0.CVE-2026-6576 · CVE.org · NIST NVDApr 19, 2026