CVE-2026-116504 | TOTOLINK A950RG 4.1.2cu.5268_B20221104 Cloud Upgrade upgrade.so setCloudUpgradeFW FileName command injection

October 26, 2026 Yanac

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104 and classified as very critical. This affects the function setCloudUpgradeFW of the file lib/cste_modules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection.

This vulnerability is documented as CVE-2026-116504. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More