A950RG vulnerabilities

CVEs whose affected-version data names the A950RG package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-114575Critical· 10.0

today

TOTOLINK A950RG product.so UploadCustomModule command injection

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command inje…

▾ MidnightTOTOLINK · A950RGvia CVEORG