Threats tagged 'ghsa-4p5v-37qj-rc37'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.4	CVE-2026-116504TOTOLINK A950RG · Injection Critical9.42026-10-26GCVE DatabaseCVE-2026-116504 A critical command injection vulnerability exists in TOTOLINK A950RG firmware version 4.1.2cu.5268_B20221104. The flaw is in the setCloudUpgradeFW function of the Cloud Upgrade component, allowing remote attackers to execute arbitrary commands via the FileName argument. Public exploit code is available, increasing the risk of exploitation. Report on CVE-2026-116504 Vulnerability CWE-74 #ghsa-4p5v-37qj-rc37	GCVE Database	2026-10-26

Page 1 of 1