Is Command Injection affected by CVE-2026-5176?

Totolik A3300R routers running firmware 17.0.0cu.557_b20221024 contain a critical remote code execution vulnerability that allows unauthenticated attackers to gain complete control of affected devices through the web interface.

CVE-2026-5176

EUVD-2026-17279 MEDIUM

2026-03-31 VulDB

6.9

CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 06, 2026 - 15:35 vuln.today

Public exploit code

Analysis Generated

Mar 31, 2026 - 01:45 vuln.today

EUVD ID Assigned

Mar 31, 2026 - 01:45 euvd

EUVD-2026-17279

CVE Published

Mar 31, 2026 - 01:15 nvd

MEDIUM 6.9

Description

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. Affected is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument provided results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

Analysis

Command injection in Totolink A3300R router firmware 17.0.0cu.557_b20221024 allows unauthenticated remote attackers to execute arbitrary system commands via the setSyslogCfg function in /cgi-bin/cstecgi.cgi. Public exploit code is available on GitHub, significantly lowering the barrier to exploitation. …

Remediation

Within 24 hours: Inventory all Totolik A3300R routers in your environment and identify any running firmware 17.0.0cu.557_b20221024. Within 7 days: Contact Totolik support to determine if a patched firmware version is available for your specific hardware revision; if available, plan firmware updates for all affected devices. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +2.4

CVSS: +34

POC: +20

CVE-2026-5176 vulnerability details – vuln.today

Back

CVE-2026-5176

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Analysis

Full analysis requires sign-in

Priority Score

Share

CVE-2026-5176

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Full analysis requires sign-in

Priority Score

Share

External POC / Exploit Code