Live › vulnerability › CVE-2026-116506
Go to dashboardTOTOLINK A950RG firmware 4.1.2cu.5268_B20221104 has a command injection flaw in the apmib_set function of firewall.so. A remote attacker can inject operating system commands and run them on the router.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:20 UTC. All times on this page are UTC.
Owners of TOTOLINK A950RG routers running firmware 4.1.2cu.5268_B20221104 are affected, and the sources describe the attack as remote. Devices exposing the admin interface to the internet or to untrusted networks are the highest-risk systems to check. Other TOTOLINK models and other firmware versions are not covered by this entry.
No product ranges from the sources yet.
4.1.2cu.5268_B20221104Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
This page as .md · .json · in your agent: get_signal("CVE-2026-116506")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.