CVE-2026-121600

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be...

CVE-2026-121599

A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of the component Multi-SSID Configuration. The manipulation of the argument wepkey2/wepkey3 results in stack-based buffer...

CVE-2026-121598

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possibl...

CVE-2026-121600

A stack-based buffer overflow vulnerability exists in the MAC Filter Handler component of TOTOLINK A950RG (version 4.1.2cu.5268_B20221104). The flaw is located in the setMacFilterRules function of the /cgi-bin/cstecgi.cgi file, specifically triggered by the manipulation of the addEffect argument....

CVE-2026-121599

The TOTOLINK A950RG (firmware version 4.1.2cu.5268_B20221104 ) is vulnerable to a stack-based buffer overflow in the Multi-SSID Configuration component. The flaw exists within the setWiFiMultipleConfig/delWiFiMultipleConfig functions located in the /cgi-bin/cstecgi.cgi file. An attacker can trigg...

CVE-2026-121597

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The...

CVE-2026-121598

A stack-based buffer overflow vulnerability exists in the Basic Wireless Configuration Handler component of TOTOLINK A950RG version 4.1.2cu.5268_B20221104 . The flaw is located in the strcpy function of the /cgi-bin/cstecgi.cgi file, where improper handling of the wepkey argument allows for remot...

EUVD-2026-116667

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possibl...

CVE-2026-121597 TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The...

CVE-2026-121597

The TOTOLINK A950RG (firmware version 4.1.2cu.5268_B20221104 ) is vulnerable to a stack-based buffer overflow within the Easy Setup Wizard Handler component. The flaw exists in the setAppEasyWizardConfig function of the /cgi-bin/cstecgi.cgi file, where manipulating the functionType argument can t...

EUVD-2026-110468

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly...

EUVD-2026-110471

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function sub402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENTLENGTH results in stack-based buffer overflow. Remote...

CVE-2026-116508

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function sub402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENTLENGTH results in stack-based buffer overflow. Remote...

CVE-2026-116507

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly...

CVE-2026-116508 TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function sub402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENTLENGTH results in stack-based buffer overflow. Remote...

CVE-2026-116508 TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function sub402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENTLENGTH results in stack-based buffer overflow. Remote...

CVE-2026-116508

A stack-based buffer overflow exists in the TOTOLINK A950RG (version 4.1.2cu.5268_B20221104) within the Device-Information CGI component. Specifically, the function sub_402340 in the infostat.cgi file is vulnerable when an attacker manipulates the CONTENT_LENGTH argument. This flaw allows for rem...

CVE-2026-116506

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function apmibset of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-116504

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setCloudUpgradeFW of the file lib/cstemodules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. T...

CVE-2026-116505

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...