Vulnerabilities

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

TOTOLINK

Product

A950RG

CVSS v3.1

9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness

CWE-119, CWE-121

NVD status

Deferred

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-121597 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 45
   CVE NVD 2h ago

   A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

   PoC public CVSS 9.9 CVE-2026-121600 TOTOLINK
2. 33
   CVE NVD 2h ago

   A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

   CVSS 9.9 CVE-2026-121598 TOTOLINK