Skip to main content
← All vulnerabilities
CVE-2026-116506

TOTOLINK A950RG firewall.so apmib_set command injection

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB

Summary

The TOTOLINK A950RG router firmware is affected, specifically the firewall.so component's apmib_set function. An attacker on the network could exploit this flaw to inject and run arbitrary commands on the device.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Affected versions

  • TOTOLINK A950RG

    4.1.2cu.5268_B20221104

References 6

VulDB

gist.github.com

totolink.net