{"id":"CVE-2026-116507","kind":"vulnerability","aliases":["CVE-2026-116507"],"related":[],"title":"TOTOLINK A950RG router: getLanguageCfg token argument leaks information remotely","description":"A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly available and might be used.","summary":"A flaw in the getLanguageCfg function of global.so on the TOTOLINK A950RG router firmware lets a remote attacker manipulate the token argument. The result is information disclosure, and the sources say a public exploit exists.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded","infrastructure","router","self-hosted","totolink"],"not_affected_if":["firmware-updated","other-router-models"],"how_to_check":"- Check the firmware version on the device admin page against `4.1.2cu.5268_B20221104`\n- unknown for other checks; the sources do not name a config setting or file path to verify beyond the affected file global.so","fix":null,"status":"open","published_at":"2026-10-26T22:16:54+00:00","first_seen_at":"2026-10-26T22:25:33+00:00","triaged_at":"2026-10-26T22:28:02+00:00","updated_at":"2026-10-26T22:28:02+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T22:28:02Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"TOTOLINK A950RG router: getLanguageCfg token argument leaks information remotely","impact":"low","summary":"A flaw in the getLanguageCfg function of global.so on the TOTOLINK A950RG router firmware lets a remote attacker manipulate the token argument. The result is information disclosure, and the sources say a public exploit exists.","category":"infrastructure","nicknames":[],"who_cares":["totolink","router","embedded","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"remote attacker reads sensitive device information","analyst_note":"Confirm the fixed firmware version and whether the web interface must be exposed or authenticated, using the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-116507 and the vendor advisory.","how_to_check":"- Check the firmware version on the device admin page against `4.1.2cu.5268_B20221104`\n- unknown for other checks; the sources do not name a config setting or file path to verify beyond the affected file global.so","needs_analyst":true,"not_affected_if":["other-router-models","firmware-updated"],"who_is_affected":"Owners of TOTOLINK A950RG routers running firmware 4.1.2cu.5268_B20221104 with an exposed web management interface. The sources do not say whether the flaw needs a logged-in session or a non-default setting. Teams not running this router model can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000607,"input_tokens":3328,"output_tokens":548,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116507':12A,15A '-2026':11A,14A '4.1.2':65C 'a950rg':2A,34B,64C 'affect':67C 'argument':6A,44B,83C 'attack':40B,90C 'avail':99C 'cu.5268_b20221104':66C 'cve':10A,13A 'disclosur':49B,88C 'embed':16B 'exist':57B 'exploit':56B,96C 'file':77C 'firmwar':36B 'flaw':24B 'function':28B,73C 'getlanguagecfg':4A,27B,74C 'global.so':30B,78C 'host':21B 'identifi':61C 'inform':8A,48B,87C 'infrastructur':17B 'launch':93C 'lead':85C 'leak':7A 'let':37B 'manipul':41B,80C 'may':91C 'might':101C 'public':55B,98C 'remot':9A,39B,94C 'result':46B 'router':3A,18B,35B 'say':53B 'self':20B 'self-host':19B 'sourc':52B 'token':5A,43B,84C 'totolink':1A,22B,33B,63C 'use':103C 'vulner':59C,70C","nicknames":[],"mitigations":[],"who_affected":"Owners of TOTOLINK A950RG routers running firmware 4.1.2cu.5268_B20221104 with an exposed web management interface. The sources do not say whether the flaw needs a logged-in session or a non-default setting. Teams not running this router model can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T22:16:54+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116507","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116507","severity":null,"published_at":"2026-10-26T22:16:54+00:00","modified_at":"2026-10-26T22:16:54+00:00","first_seen_at":"2026-10-26T22:25:33+00:00","fetched_at":"2026-10-26T22:25:33+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}