CVE-2026-121597 TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The...

EUVD-2026-110468

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly...

EUVD-2026-110471

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function sub402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENTLENGTH results in stack-based buffer overflow. Remote...

CVE-2026-116508

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function sub402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENTLENGTH results in stack-based buffer overflow. Remote...

CVE-2026-116507

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly...

CVE-2026-116508 TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function sub402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENTLENGTH results in stack-based buffer overflow. Remote...

CVE-2026-116508 TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function sub402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENTLENGTH results in stack-based buffer overflow. Remote...

CVE-2026-116508

A stack-based buffer overflow exists in the TOTOLINK A950RG (version 4.1.2cu.5268_B20221104) within the Device-Information CGI component. Specifically, the function sub_402340 in the infostat.cgi file is vulnerable when an attacker manipulates the CONTENT_LENGTH argument. This flaw allows for rem...

CVE-2026-116506

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function apmibset of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-116504

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setCloudUpgradeFW of the file lib/cstemodules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. T...

CVE-2026-116505

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...

CVE-2026-116507 TOTOLINK A950RG global.so getLanguageCfg information disclosure

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly...

CVE-2026-116507 TOTOLINK A950RG global.so getLanguageCfg information disclosure

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly...

CVE-2026-116507

The TOTOLINK A950RG running version 4.1.2cu.5268_B20221104 is vulnerable to an information disclosure vulnerability. The flaw exists in the getLanguageCfg function within the global.so file, where manipulating the token argument can lead to the exposure of sensitive information. This attack can b...

CVE-2026-116506 TOTOLINK A950RG firewall.so apmib_set command injection

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function apmibset of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-116506

A command injection vulnerability exists in the TOTOLINK A950RG (version 4.1.2cu.5268_B20221104) within the apmib_set function of the firewall.so file. This flaw allows an attacker to initiate a remote attack to execute arbitrary commands. The exploit has been publicly disclosed and may be utiliz...

EUVD-2026-110464

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function apmibset of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-116506 TOTOLINK A950RG firewall.so apmib_set command injection

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function apmibset of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-116505 TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...

CVE-2026-116505 TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...