Totolink A950rg Firmware

TOTOLINK A950RG MAC Filter Handler Buffer Overflow (v4.1.2cu.5268_B20221104)
CVE-2026-121600 9.4 - Critical - November 04, 2026

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.

Stack Overflow

TOTOLINK A950RG 4.1.2cu Buffer Overflow in Multi-SSID Config (setWiFiMultCfg)
CVE-2026-121599 9.4 - Critical - November 04, 2026

A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of the component Multi-SSID Configuration. The manipulation of the argument wepkey2/wepkey3 results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

Stack Overflow

TOTOLINK A950RG 4.1.2cu.5268_B20221104 Stack Buffer Overflow via wepkey
CVE-2026-121598 9.4 - Critical - November 04, 2026

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Stack Overflow

Totolink A950RG 4.1.2CU Buffer Overflow in Easy Setup Wizard
CVE-2026-121597 9.4 - Critical - November 04, 2026

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Stack Overflow

TOTOLINK A950RG 4.1.2cu.5268 Buffer Overflow in infostat.cgi (Device-Info CGI)
CVE-2026-116508 10 - Critical - October 26, 2026

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT_LENGTH results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

Stack Overflow

TOTOLINK A950RG 4.1.2cu.5268 Info Disclosure via global.so getLanguageCfg
CVE-2026-116507 6.9 - Medium - October 26, 2026

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly available and might be used.

Information Disclosure

Command Injection in TOTOLINK A950RG 4.1.2cu Firewall.so apmib_set before 4.1.2cu.5268_B20221104
CVE-2026-116506 9.4 - Critical - October 26, 2026

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Command Injection

TOTOLINK A950RG 4.1.2cu.5268_B20221104 Remote Cmd Injection in DeviceInfo Handler
CVE-2026-116505 9.4 - Critical - October 26, 2026

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched remotely. The exploit has been made public and could be used.

Command Injection

TOTOLINK A950RG 4.1.2cu.5268 Command Injection in Cloud Upgrade
CVE-2026-116504 9.4 - Critical - October 26, 2026

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the file lib/cste_modules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Command Injection

TOTOLINK A950RG 4.1.2cu.5268 command injection in UploadCustomModule
CVE-2026-114575 10 - Critical - October 22, 2026

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has been published and may be used.

Command Injection

Buffer Overflow in TOTOlink A950RG V4.1.2cu.5204_B20210112 NoticeUrl
CVE-2025-45797 9.8 - Critical - May 08, 2025

TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cste_modules/system.so.

Memory Corruption

Command Exec in TOTOLINK A950RG V4.1.2 setNoticeCfg IpTo
CVE-2025-45798 9.8 - Critical - May 08, 2025

A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cste_modules/system.so library, specifically in the processing of the IpTo parameter.

Command Injection

Command Execution in setDeviceName (global.so) on TOTOLINK A950RG 4.1.2cu
CVE-2025-45800 - May 02, 2025

TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the processing of the deviceMac parameter.