What’s Vulnerable › Vulnerabilities
CVE-2026-116506: TOTOLINK A950RG firewall.so apmib_set command injection
- Severity: critical (CVSS 9.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-26 · updated 2026-10-27
- Weakness: CWE-74
Description
A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Summary
TOTOLINK A950RG firmware version 4.1.2cu.5268_B20221104 contains a command injection flaw in the apmib_set function of firewall.so. The vulnerability is remotely exploitable and rated critical (CVSS 9.9), allowing an attacker to execute arbitrary commands on the device. A public exploit exists and may be used in attacks, though the flaw is not in CISA KEV. Update to a fixed firmware release from TOTOLINK if available, and restrict remote access to the device's management interface in the meantime.
يحتوي جهاز TOTOLINK A950RG بإصدار البرنامج الثابت 4.1.2cu.5268_B20221104 على ثغرة حقن أوامر في الدالة apmib_set ضمن الملف firewall.so. يمكن استغلال الثغرة عن بُعد، وقد صُنّفت بالحرجة (CVSS 9.9)، ما يسمح للمهاجم بتنفيذ أوامر عشوائية على الجهاز. هناك استغلال منشور علنًا وقد يُستخدم في الهجمات، رغم أن الثغرة ليست ضمن قائمة CISA KEV. يُنصح بالتحديث إلى إصدار برنامج ثابت من TOTOLINK عند توفره، وتقييد الوصول البعيد إلى واجهة إدارة الجهاز في هذه الأثناء.
Affected products
- TOTOLINK A950RG: 4.1.2cu.5268_B20221104
References
- https://gist.github.com/H3rmesk1t/1046036a8601e93f375754e11307bfc8
- https://vuldb.com/cve/CVE-2026-116506
- https://vuldb.com/submit/1022555
- https://vuldb.com/vuln/426404
- https://vuldb.com/vuln/426404/cti
- https://www.totolink.net/
Get alerted when CVE-2026-116506 or the next vulnerability affects your stack