Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. This vulnerability affects the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. The manipulation of the argument qos_up_bw results in command injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
⚡ New CVE Alert: CVE-2026-5102 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5102 #CVE-2026-5102 #CVE #Medium #CyberSecurity #InfoSec https://t.co/7oEHv7oP8q
Post summary
The tweet simply announces CVE-2026-5102 with a medium severity score, but no technical, exploit, or mitigation details are provided.
CVE-2026-5102 A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. This vulnerability affects the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi o… https://www.cve.org/CVERecord?id=CVE-2026-5102
Post summary
The brief post merely announces the existence of CVE‑2026‑5102 and links to its CVE record, without providing technical, exploit, or mitigation details.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5102 - Totolink A3300R Parameter cstecgi.cgi setSmartQosCfg command injection Intel Report: https://ift.tt/qHhvCMD
Post summary
A new command‑injection vulnerability (CVE‑2026‑5102) in the Totolink A3300R router’s cstecgi.cgi setSmartQosCfg parameter has been reported. No Proof of Concept, exploit, or patch details were provided, and active exploitation is not indicated.
Totolink A3300R Vulnerability CVE-2026-5102: Command Injection Exploit Revealed https://cybersecuritypath.com/totolink-a3300r-vulnerability-cve-2026-5102-command-injection-exploit-revealed/ #cybersecuritynews #Totolink #vulnerability
Post summary
A brief mention of a discovered TótoLink router vulnerability (CVE-2026-5102) with a link to an external article, but no concrete details about the exploit or mitigation were provided in the text.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | totolink | a3300r | - | - | - |
| OS | totolink | a3300r_firmware | 17.0.0cu.557_b20221024 | - | - |