CVE-2026-116504: critical vulnerability in TOTOLINK A950RG
TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.4epss 1.5%
A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the file lib/cste_modules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
Affected products
TOTOLINK · A950RGpublic PoCs found — 1
cve_referencegist.github.com/H3rmesk1t/c2f2dcfdb6238a7ddb8fb0622ad52948unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — TOTOLINK A950RG
In the same product, most dangerous first.
CVE-2026-116505CRITICALTOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injectionEPSS 2.7%CVE-2026-114575CRITICALTOTOLINK A950RG product.so UploadCustomModule command injectionEPSS 2.2%CVE-2026-116506CRITICALTOTOLINK A950RG firewall.so apmib_set command injectionEPSS 1.9%CVE-2025-4496HIGHTOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflowEPSS 1.2%CVE-2026-15271HIGHTOTOLINK EX200 Web boa.conf least privilege violationEPSS 0.7%CVE-2026-116508CRITICALTOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflowEPSS 0.6%