CVE-2026-114575 | TOTOLINK A950RG 4.1.2cu.5268_B20221104 product.so UploadCustomModule FileMd5 command injection

October 21, 2026 Yanac

A vulnerability classified as very critical was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection.

This vulnerability is tracked as CVE-2026-114575. The attack can be launched remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More