CVE-2026-116506

EUVD-2026-110464
A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.9 CRITICAL
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 79.34%
Common Weakness Enumeration
References
https://gist.github.com/H3rmesk1t/1046036a8601e93f375754e11307bfc8
https://vuldb.com/cve/CVE-2026-116506
https://vuldb.com/submit/1022555
https://vuldb.com/vuln/426404
https://vuldb.com/vuln/426404/cti
https://www.totolink.net/