Live › vulnerability › CVE-2026-116507
Go to dashboardA flaw in the getLanguageCfg function of global.so on the TOTOLINK A950RG router firmware lets a remote attacker manipulate the token argument. The result is information disclosure, and the sources say a public exploit exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 22:25 UTC. All times on this page are UTC.
Owners of TOTOLINK A950RG routers running firmware 4.1.2cu.5268_B20221104 with an exposed web management interface. The sources do not say whether the flaw needs a logged-in session or a non-default setting. Teams not running this router model can skip it.
No product ranges from the sources yet.
4.1.2cu.5268_B20221104Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly available and might be used.
This page as .md · .json · in your agent: get_signal("CVE-2026-116507")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.