Vulnerabilities

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the file lib/cste_modules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

TOTOLINK

Product

A950RG

CVSS v3.1

9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness

CWE-74, CWE-77

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-116504 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 32
   CVE NVD 5d ago

   A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

   PoC public CVSS 10.0 CVE-2026-116508 TOTOLINK
2. 20
   CVE NVD 5d ago

   A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

   CVSS 9.1 CVE-2026-116505 TOTOLINK