CVE-2026-116504

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setCloudUpgradeFW of the file lib/cstemodules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. T...

EUVD-2026-110321

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setCloudUpgradeFW of the file lib/cstemodules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. T...

CVE-2026-116504

The TOTOLINK A950RG (firmware version 4.1.2cu.5268_B20221104 ) is vulnerable to a command injection flaw in the Cloud Upgrade component. Specifically, the setCloudUpgradeFW function within the file lib/cste_modules/upgrade.so fails to properly neutralize the FileName argument. This oversight allo...

CVE-2026-116504 TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setCloudUpgradeFW of the file lib/cstemodules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. T...