Critical severity9.9NVD Advisory· Published Oct 26, 2026

CVE-2026-116504

Description

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the file lib/cste_modules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Totolink/A950RGllm-fuzzy
Range: 4.1.2cu.5268_B20221104

Patches

Vulnerability mechanics

References

gist.github.com/H3rmesk1t/c2f2dcfdb6238a7ddb8fb0622ad52948nvd
vuldb.com/cve/CVE-2026-116504nvd
vuldb.com/submit/1022553nvd
vuldb.com/vuln/426402nvd
vuldb.com/vuln/426402/ctinvd
www.totolink.netnvd

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000