Vulnerabilities

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

TOTOLINK

Product

A950RG

CVSS v3.1

9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitation

public exploit code reported

Weakness

CWE-119, CWE-121

NVD status

Deferred

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-121600 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 33
   CVE NVD 1h ago

   A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

   CVSS 9.9 CVE-2026-121598 TOTOLINK
2. 33
   CVE NVD 2h ago

   A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

   CVSS 9.9 CVE-2026-121597 TOTOLINK