Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:totolink:a950rg:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

TOTOLINK A950RG: Remote command injection via UploadCustomModule (CVE-2026-114575)

A flaw in the TOTOLINK A950RG (version 4.1.2cu.5268_B20221104) function UploadCustomModule allows for remote command injection via manipulation of the FileMd5 argument.

A950RG
1c