---
id: "CVE-2026-116507"
kind: "vulnerability"
aliases: ["CVE-2026-116507"]
title: "TOTOLINK A950RG router: getLanguageCfg token argument leaks information remotely"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["embedded", "infrastructure", "router", "self-hosted", "totolink"]
not_affected_if: ["firmware-updated", "other-router-models"]
published_at: "2026-10-26T22:16:54+00:00"
first_seen_at: "2026-10-26T22:25:33+00:00"
updated_at: "2026-10-26T22:28:02+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116507", "first_seen_at": "2026-10-26T22:25:33+00:00"}]
---

# TOTOLINK A950RG router: getLanguageCfg token argument leaks information remotely

A flaw in the getLanguageCfg function of global.so on the TOTOLINK A950RG router firmware lets a remote attacker manipulate the token argument. The result is information disclosure, and the sources say a public exploit exists.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the firmware version on the device admin page against `4.1.2cu.5268_B20221104`
- unknown for other checks; the sources do not name a config setting or file path to verify beyond the affected file global.so

## Timeline

- 2026-10-26T22:25:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116507

## From the sources

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly available and might be used.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_