Vulnerabilities

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

TOTOLINK

Product

A950RG

CVSS v3.1

9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness

CWE-119, CWE-121

NVD status

Deferred

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-121598 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 45
   CVE NVD 2h ago

   A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

   PoC public CVSS 9.9 CVE-2026-121600 TOTOLINK
2. 33
   CVE NVD 3h ago

   A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

   CVSS 9.9 CVE-2026-121597 TOTOLINK