CVE-2026-114575

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cstemodules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has be...

CVE-2026-114575 TOTOLINK A950RG product.so UploadCustomModule command injection

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cstemodules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has be...

CVE-2026-114575 TOTOLINK A950RG product.so UploadCustomModule command injection

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cstemodules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has be...

CVE-2026-114575

The TOTOLINK A950RG running firmware version 4.1.2cu.5268_B20221104 is vulnerable to command injection due to a flaw in the UploadCustomModule function located in the file lib/cste_modules/product.so . An attacker can trigger this vulnerability by manipulating the FileMd5 argument, allowing for r...

EUVD-2026-107694

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cstemodules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has be...

PT-2026-120890

Name of the Vulnerable Software and Affected Versions TOTOLINK A950RG version 4.1.2cu.5268 B20221104 Description A remote command injection flaw exists in the UploadCustomModule function within the lib/cste modules/product.so file. This issue occurs when the FileMd5 argument is manipulated,...

TOTOLINK a950rg firmware input validation error vulnerability

The TOTOLINK a950rg firmware version 4.1.2cu.5268B20221104 contains a security vulnerability. This vulnerability stems from improper handling of the FileMd5 parameter in the UploadCustomModule function within the file lib/cstemodules/product.so. It may lead to command injection, allowing attacker...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38580)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. There is an access control vulnerability in TOTOLINK T6. This vulnerability stems from incorrect access control in the UploadCustomModule function. Attackers can exploit this vulnerability by sending specially crafted POST...

CVE-2026-51723: Improper Access Control

Incorrect access control in the UploadCustomModule function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to install a custom CGI module via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51723

The TOTOLINK T6 wireless dual-band Mesh router (firmware version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control flaw within the UploadCustomModule function. This vulnerability allows unauthenticated attackers to install a custom CGI module by sending a specially crafted POST...

CVE-2026-19812

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-19812 TOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflow

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-19812

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-19812

CVE-2026-19812 affects TOTOLINK A800R (version 4.1.2cu.5137_B20200730) in the file path product.so, function UploadCustomModule. The issue is a stack-based buffer overflow caused by manipulation of the argument File in /cgi-bin/cstecgi.cgi. This vulnerability enables remote exploitation (network ...

EUVD-2026-58606

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-19812 TOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflow

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-19812: Stack-based Buffer Overflow

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

PT-2026-71972

A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137 B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out...

CVE-2026-7717

A vulnerability was determined in Totolink WA300 5.2cu.7112B20190227. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument File can lead to buffer overflow. The attack can be launched...

CVE-2026-7717

A vulnerability was determined in Totolink WA300 5.2cu.7112B20190227. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executing a manipulation of the argument File can lead to buffer overflow. The attack can be launched...