CVE-2026-116505
A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104
- Risk score
- 55/100
- CVSS
- 9.1 v3.1
- Published
- 26 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched remotely. The exploit h…
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 9.1 critical
References
Original description
A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched remotely. The exploit has been made public and could be used.
Last activity 26 Oct 2026. Patch Forecast updates every hour.