A950rg Firmware (Totolink) - vulnerabilities (CVEs)

39 CVEs, 6 in the last 30 days, 9 known versions, newest CVE from 2026-10-26. Vendor: Totolink.

CVEs of A950rg Firmware

• CVE-2026-116508 - CVSS 10 (critical), 2026-10-26: A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of…
• CVE-2026-116507 - CVSS 6.9 (medium), 2026-10-26: A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so.…
• CVE-2026-116506 - CVSS 9.9 (critical), 2026-10-26: A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes…
• CVE-2026-116505 - CVSS 9.4 (critical), 2026-10-26: A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the…
• CVE-2026-116504 - CVSS 9.9 (critical), 2026-10-26: A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the file lib/cste_modules/upgrade.so…
• CVE-2026-114575 - CVSS 10 (critical), 2026-10-22: A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file…
• CVE-2025-67187 - CVSS 9.8 (critical), 2026-02-03: A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface of…
• CVE-2025-67186 - CVSS 9.8 (critical), 2026-02-03: TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/firewall.so. The…
• CVE-2025-67189 - CVSS 6.5 (medium), 2026-02-03: A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112. The urlKeyword parameter is not properly…
• CVE-2025-67188 - CVSS 9.8 (critical), 2026-02-03: A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The issue resides in the setRadvdCfg interface of the…
• CVE-2025-60699 - CVSS 6.5 (medium), 2025-11-13: A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `global.so` binary. The `getSaveConfig`…
• CVE-2025-60702 - CVSS 6.5 (medium), 2025-11-13: A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `system.so` binary. The `setDiagnosisCfg`…
• CVE-2025-44655 - CVSS 9.8 (critical), 2025-07-21: In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf. This could lead to unauthorized access to…
• CVE-2025-4496 - CVSS 9.8 (critical), 2025-05-10: A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This…
• CVE-2025-45798 - CVSS 9.8 (critical), 2025-05-08: A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The vulnerability is located in the setNoticeCfg interface within the…
• CVE-2025-45797 - CVSS 9.8 (critical), 2025-05-08: TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl…
• CVE-2025-45800 - CVSS 9.8 (critical), 2025-05-02: TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library,…
• CVE-2025-28028 - CVSS 7.3 (high), 2025-04-23: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…
• CVE-2025-28025 - CVSS 7.3 (high), 2025-04-23: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…
• CVE-2025-28029 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…
• CVE-2025-28036 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the…
• CVE-2025-28035 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the…
• CVE-2025-28027 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain…
• CVE-2025-28026 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain…
• CVE-2025-28037 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the…
• CVE-2025-28032 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
• CVE-2025-28034 - CVSS 9.8 (critical), 2025-04-22: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
• CVE-2025-28033 - CVSS 7.3 (high), 2025-04-22: TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU…
• CVE-2022-36612 - CVSS 7.8 (high), 2022-08-29: TOTOLINK A950RG V4.1.2cu.5204_B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample.
• CVE-2022-28935 - CVSS 7.2 (high), 2022-07-06: Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730,…
• CVE-2022-26210 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26214 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26206 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26209 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26212 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26208 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26211 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-26207 - CVSS 9.8 (critical), 2022-03-15: Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU…
• CVE-2022-25082 - CVSS 9.8 (critical), 2022-02-24: TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the "Main" function. This…