CVE-2026-116506
TOTOLINK A950RG firewall.so apmib_set command injection
At a glance Severity CRITICAL 9.4 EPSS EPSS 1.88 % · percentile 79 (2026-10-27) State PUBLISHED Published 2026-10-26 Updated 2026-10-26 Assigner VulDB NVD status Deferred Description A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Scores Version Score Vector Scored by CVSS 4.0 CRITICAL 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P VulDB CVSS 3.1 CRITICAL 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R VulDB CVSS 3.0 CRITICAL 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R VulDB CVSS 2.0 CRITICAL 9.0 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR VulDB CVSS 4.0 HIGH 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X NVD · cna@vuldb.com (Secondary) CVSS 3.1 CRITICAL 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H NVD · cna@vuldb.com (Primary) CVSS 2.0 HIGH 9.0 AV:N/AC:L/Au:S/C:C/I:C/A:C NVD · cna@vuldb.com (Secondary)
Weaknesses (CWE)
European references
Affected products
References
Sources
