Vulnerabilities

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT_LENGTH results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

TOTOLINK

Product

A950RG

CVSS v3.1

10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

0.006 (p49)

Exploitation

public exploit code reported

Weakness

CWE-119, CWE-121

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-116508 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 20
   CVE NVD 5d ago

   A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

   CVSS 9.1 CVE-2026-116505 TOTOLINK
2. 20
   CVE NVD 5d ago

   A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

   CVSS 9.9 CVE-2026-116504 TOTOLINK