Login Request a demo
A9
Product
A950RG
by TOTOLINK · last CVE Oct 26, 2026
39
CVEs
0
On KEV
10.0
Max CVSS
6
New 30D
Vulnerabilities39In the news0Timeline
Severity mix
Critical 26High 9Medium 4Low 0
Severity
All severities39Critical26High9Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add A950RG to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116508
New
10.0
1%
Oct 26
TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow
Affected: 4.1.2cu.5268_B20221104
CVE-2026-114575
New
10.0
2%
Oct 22
TOTOLINK A950RG product.so UploadCustomModule command injection
Affected: 4.1.2cu.5268_B20221104
CVE-2026-116506
New
9.9
2%
Oct 26
TOTOLINK A950RG firewall.so apmib_set command injection
Affected: 4.1.2cu.5268_B20221104
CVE-2026-116504
New
9.9
2%
Oct 26
TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection
Affected: 4.1.2cu.5268_B20221104
CVE-2025-67188
9.8
1%
Feb 3
A buffer overflow vulnerability exists in TOTOLINK A950RG V4.1.2cu.5204_B20210112
Affected: 4.1.2cu.5204_b20210112
CVE-2025-67187
9.8
1%
Feb 3
A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112
Affected: 4.1.2cu.5204_b20210112
CVE-2025-67186
9.8
1%
Feb 3
TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cste_modules/firewall.so
Affected: 4.1.2cu.5204_b20210112
CVE-2025-44655
9.8
0%
Jul 21
In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf
Affected: 5.9
CVE-2025-4496
9.8
1%
May 10
A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927
Affected: 4.1.8cu.5241_b20210927
CVE-2025-45798
9.8
1%
May 8
A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112
Affected: 4.1.2cu.5204_b20210112
CVE-2025-45797
9.8
18%
May 8
TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability
Affected: 4.1.2cu.5204_b20210112
CVE-2025-45800
9.8
1%
May 2
TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the…
Affected: 4.1.2cu.5204_b20210112
CVE-2025-28036
9.8
1%
Apr 22
TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter
Affected: 4.1.2cu.5161_b20200903
CVE-2025-28035
9.8
1%
Apr 22
TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter
Affected: 4.1.2cu.5161_b20200903
CVE-2025-28037
9.8
1%
Apr 22
TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function…
Affected: 4.1.2cu.5182_b20201026
CVE-2025-28034
9.8
1%
Apr 22
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R…
Affected: 4.1.2cu.5161_b20200903
CVE-2022-26214
9.8
3%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5161_b20200903
CVE-2022-26212
9.8
3%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5161_b20200903
CVE-2022-26211
9.8
3%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5161_b20200903
CVE-2022-26210
9.8
6%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5161_b20200903
CVE-2022-26209
9.8
2%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5161_b20200903
CVE-2022-26208
9.8
3%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5161_b20200903
CVE-2022-26207
9.8
2%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5161_b20200903
CVE-2022-26206
9.8
2%
Mar 15
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R…
Affected: 4.1.2cu.5161_b20200903
CVE-2022-25082
9.8
14%
Feb 24
TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the "Main" function
Affected: 4.1.2cu.5204_b20210112; 5.9c.4050_b20190424
CVE-2026-116505
New
9.1
3%
Oct 26
TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection
Affected: 4.1.2cu.5268_B20221104
CVE-2022-36612
7.8
0%
Aug 29
TOTOLINK A950RG V4.1.2cu.5204_B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample
Affected: 4.1.2cu.5204_b20210112
CVE-2025-28028
7.3
0%
Apr 23
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow…
Affected: 4.1.2cu.5161_b20200903
CVE-2025-28025
7.3
0%
Apr 23
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow…
Affected: 4.1.2cu.5161_b20200903
CVE-2025-28029
7.3
0%
Apr 22
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow…
Affected: 4.1.2cu.5161_b20200903
CVE-2025-28027
7.3
0%
Apr 22
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow…
Affected: 4.1.2cu.5161_b20200903
CVE-2025-28026
7.3
0%
Apr 22
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow…
Affected: 4.1.2cu.5161_b20200903
CVE-2025-28033
7.3
0%
Apr 22
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R…
Affected: 4.1.2cu.5161_b20200903
CVE-2025-28032
7.3
0%
Apr 22
TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R…
Affected: 4.1.2cu.5161_b20200903
CVE-2022-28935
7.2
3%
Jul 6
Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU…
Affected: 4.1.2cu.5161_b20200903
CVE-2025-67189
6.5
0%
Feb 3
A buffer overflow vulnerability exists in the setParentalRules interface of TOTOLINK A950RG V4.1.2cu.5204_B20210112
Affected: 4.1.2cu.5204_b20210112
CVE-2025-60702
6.5
3%
Nov 13
A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `system.so` binary
Affected: 5.9c.4592_b20191022
CVE-2025-60699
6.5
1%
Nov 13
A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `global.so` binary
Affected: 5.9c.4592_b20191022
CVE-2026-116507
New
5.3
0%
Oct 26
TOTOLINK A950RG global.so getLanguageCfg information disclosure
Affected: 4.1.2cu.5268_B20221104
Showing 39