Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-121600

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104

Risk score
59/100
CVSS
9.9 v3.1
Published
4 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is
A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be initiated remotely. T…
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 9.9 critical

References

Original description

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.

Last activity 4 Nov 2026. Patch Forecast updates every hour.