{"schema_version":1,"title":"TOTOLINK A950RG vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 14 vulnerabilities in TOTOLINK A950RG: 0 in the last 7 days and 10 in the last 90 days, 10 of them critical and 0 exploited in the wild. The most recent, CVE-2026-121600, was published on 4 November 2026. 10 vulnerabilities in the last four weeks, up from none in the four before. 9 critical against 0.","url":"https://junglewise.ai/threats/technologies/a950rg","json_url":"https://junglewise.ai/threats/technologies/a950rg.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/a950rg","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":14,"critical":10,"exploited":0,"last_7_days":0,"last_30_days":10,"last_90_days":10,"last_365_days":13},"latest":[{"cve":"CVE-2026-121600","cvss":9.9,"slug":"cve-2026-121600-a-flaw-has-been-found-in-totolink-a950rg-4-1-2cu-5268-b20221104","title":"TOTOLINK A950RG stack buffer overflow in MAC filter handler","severity":"critical","exploited":false,"published_at":"2026-11-04T01:17:23.647+00:00","url":"https://junglewise.ai/threats/cve-2026-121600-a-flaw-has-been-found-in-totolink-a950rg-4-1-2cu-5268-b20221104"},{"cve":"CVE-2026-121599","cvss":9.9,"slug":"cve-2026-121599-a-vulnerability-was-detected-in-totolink-a950rg-4-1-2cu-5268","title":"TOTOLINK A950RG stack buffer overflow in WiFi configuration","severity":"critical","exploited":false,"published_at":"2026-11-04T01:17:23.413+00:00","url":"https://junglewise.ai/threats/cve-2026-121599-a-vulnerability-was-detected-in-totolink-a950rg-4-1-2cu-5268"},{"cve":"CVE-2026-121598","cvss":9.9,"slug":"cve-2026-121598-a-security-vulnerability-has-been-detected-in-totolink-a950rg-4","title":"TOTOLINK A950RG stack buffer overflow in wireless configuration","severity":"critical","exploited":false,"published_at":"2026-11-04T01:17:23.16+00:00","url":"https://junglewise.ai/threats/cve-2026-121598-a-security-vulnerability-has-been-detected-in-totolink-a950rg-4"},{"cve":"CVE-2026-121597","cvss":9.9,"slug":"cve-2026-121597-a-weakness-has-been-identified-in-totolink-a950rg-4-1-2cu-5268","title":"TOTOLINK A950RG stack buffer overflow in Easy Setup Wizard","severity":"critical","exploited":false,"published_at":"2026-11-04T00:17:27.41+00:00","url":"https://junglewise.ai/threats/cve-2026-121597-a-weakness-has-been-identified-in-totolink-a950rg-4-1-2cu-5268"},{"cve":"CVE-2026-116508","cvss":10,"slug":"cve-2026-116508-a-security-flaw-has-been-discovered-in-totolink-a950rg-4-1-2cu","title":"TOTOLINK A950RG stack buffer overflow in infostat.cgi","severity":"critical","exploited":false,"published_at":"2026-10-26T22:16:54.373+00:00","url":"https://junglewise.ai/threats/cve-2026-116508-a-security-flaw-has-been-discovered-in-totolink-a950rg-4-1-2cu"},{"cve":"CVE-2026-116507","cvss":5.3,"slug":"cve-2026-116507-a-vulnerability-was-identified-in-totolink-a950rg-4-1-2cu-5268","title":"TOTOLINK A950RG information disclosure in getLanguageCfg","severity":"medium","exploited":false,"published_at":"2026-10-26T22:16:54.197+00:00","url":"https://junglewise.ai/threats/cve-2026-116507-a-vulnerability-was-identified-in-totolink-a950rg-4-1-2cu-5268"},{"cve":"CVE-2026-116506","cvss":9.9,"slug":"cve-2026-116506-a-vulnerability-was-determined-in-totolink-a950rg-4-1-2cu-5268","title":"TOTOLINK A950RG command injection in firewall.so","severity":"critical","exploited":false,"published_at":"2026-10-26T21:18:13.047+00:00","url":"https://junglewise.ai/threats/cve-2026-116506-a-vulnerability-was-determined-in-totolink-a950rg-4-1-2cu-5268"},{"cve":"CVE-2026-116505","cvss":9.1,"slug":"cve-2026-116505-a-vulnerability-was-found-in-totolink-a950rg-4-1-2cu-5268","title":"TOTOLINK A950RG command injection in device-information handler","severity":"critical","exploited":false,"published_at":"2026-10-26T21:18:12.73+00:00","url":"https://junglewise.ai/threats/cve-2026-116505-a-vulnerability-was-found-in-totolink-a950rg-4-1-2cu-5268"},{"cve":"CVE-2026-116504","cvss":9.9,"slug":"cve-2026-116504-a-vulnerability-has-been-found-in-totolink-a950rg-4-1-2cu-5268","title":"TOTOLINK A950RG command injection in cloud upgrade","severity":"critical","exploited":false,"published_at":"2026-10-26T21:18:12.42+00:00","url":"https://junglewise.ai/threats/cve-2026-116504-a-vulnerability-has-been-found-in-totolink-a950rg-4-1-2cu-5268"},{"cve":"CVE-2026-114575","cvss":10,"slug":"cve-2026-114575-a-flaw-has-been-found-in-totolink-a950rg-4-1-2cu-5268-b20221104","title":"TOTOLINK A950RG command injection in UploadCustomModule","severity":"critical","exploited":false,"published_at":"2026-10-22T01:16:58.533+00:00","url":"https://junglewise.ai/threats/cve-2026-114575-a-flaw-has-been-found-in-totolink-a950rg-4-1-2cu-5268-b20221104"},{"cve":"CVE-2026-15271","cvss":7.5,"slug":"cve-2026-15271-totolink-multiple-devices-privilege-escalation-in-web-interface","title":"TOTOLINK multiple devices privilege escalation in Web Interface","severity":"high","exploited":false,"published_at":"2026-07-09T22:17:02.21+00:00","url":"https://junglewise.ai/threats/cve-2026-15271-totolink-multiple-devices-privilege-escalation-in-web-interface"},{"cve":"CVE-2025-60702","cvss":6.5,"epss":0.0256,"slug":"cve-2025-60702-a-command-injection-vulnerability-exists-in-the-totolink-a950rg","title":"A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the…","severity":"medium","exploited":false,"published_at":"2025-11-13T20:15:52.923+00:00","url":"https://junglewise.ai/threats/cve-2025-60702-a-command-injection-vulnerability-exists-in-the-totolink-a950rg"},{"cve":"CVE-2025-60699","cvss":6.5,"epss":0.009,"slug":"cve-2025-60699-a-buffer-overflow-vulnerability-exists-in-the-totolink-a950rg","title":"A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the…","severity":"medium","exploited":false,"published_at":"2025-11-13T20:15:52.773+00:00","url":"https://junglewise.ai/threats/cve-2025-60699-a-buffer-overflow-vulnerability-exists-in-the-totolink-a950rg"},{"cve":"CVE-2025-44655","cvss":9.8,"epss":0.0034,"slug":"cve-2025-44655-totolink-routers-incorrect-privilege-assignment-in-vsftpd","title":"TOTOLink Routers incorrect privilege assignment in vsftpd","severity":"critical","exploited":false,"published_at":"2025-07-21T16:15:29.323+00:00","url":"https://junglewise.ai/threats/cve-2025-44655-totolink-routers-incorrect-privilege-assignment-in-vsftpd"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-10-26","critical":4,"exploited":0,"vulnerabilities":5},{"week":"2026-11-02","critical":4,"exploited":0,"vulnerabilities":4},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"TOTOLINK X2000r","slug":"x2000r","vulnerabilities":31,"url":"https://junglewise.ai/threats/technologies/x2000r"},{"name":"TOTOLINK A3300R","slug":"a3300r","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/a3300r"},{"name":"TOTOLINK A3300r Firmware","slug":"a3300r-firmware","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/a3300r-firmware"},{"name":"TOTOLINK A8000RU","slug":"a8000ru","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/a8000ru"},{"name":"TOTOLINK A3002MU","slug":"a3002mu","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/a3002mu"},{"name":"TOTOLINK CA300-PoE","slug":"ca300-poe","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/ca300-poe"},{"name":"TOTOLINK CA750-PoE","slug":"ca750-poe","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/ca750-poe"},{"name":"TOTOLINK A7100RU","slug":"a7100ru","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/a7100ru"},{"name":"TOTOLINK NR1800X","slug":"nr1800x","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/nr1800x"},{"name":"TOTOLINK X5000R","slug":"x5000r","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/x5000r"},{"name":"TOTOLINK A720R","slug":"a720r","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/a720r"},{"name":"TOTOLINK A720R firmware","slug":"a720r-firmware","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/a720r-firmware"}],"technology":{"hub":true,"name":"TOTOLINK A950RG","slug":"a950rg","vendor":{"hub":true,"name":"TOTOLINK","slug":"totolink","url":"https://junglewise.ai/threats/vendors/totolink"},"aliases":[],"category":"firmware","homepage":"https://www.totolink.net/home/menu/detail/menu_list/products/id/54.html","description":"The A950RG is a dual-band wireless router.","url":"https://junglewise.ai/threats/technologies/a950rg"},"most_severe":[{"cve":"CVE-2026-116508","cvss":10,"slug":"cve-2026-116508-a-security-flaw-has-been-discovered-in-totolink-a950rg-4-1-2cu","title":"TOTOLINK A950RG stack buffer overflow in infostat.cgi","severity":"critical","exploited":false,"published_at":"2026-10-26T22:16:54.373+00:00","url":"https://junglewise.ai/threats/cve-2026-116508-a-security-flaw-has-been-discovered-in-totolink-a950rg-4-1-2cu"},{"cve":"CVE-2026-114575","cvss":10,"slug":"cve-2026-114575-a-flaw-has-been-found-in-totolink-a950rg-4-1-2cu-5268-b20221104","title":"TOTOLINK A950RG command injection in UploadCustomModule","severity":"critical","exploited":false,"published_at":"2026-10-22T01:16:58.533+00:00","url":"https://junglewise.ai/threats/cve-2026-114575-a-flaw-has-been-found-in-totolink-a950rg-4-1-2cu-5268-b20221104"},{"cve":"CVE-2026-121600","cvss":9.9,"slug":"cve-2026-121600-a-flaw-has-been-found-in-totolink-a950rg-4-1-2cu-5268-b20221104","title":"TOTOLINK A950RG stack buffer overflow in MAC filter handler","severity":"critical","exploited":false,"published_at":"2026-11-04T01:17:23.647+00:00","url":"https://junglewise.ai/threats/cve-2026-121600-a-flaw-has-been-found-in-totolink-a950rg-4-1-2cu-5268-b20221104"},{"cve":"CVE-2026-121599","cvss":9.9,"slug":"cve-2026-121599-a-vulnerability-was-detected-in-totolink-a950rg-4-1-2cu-5268","title":"TOTOLINK A950RG stack buffer overflow in WiFi configuration","severity":"critical","exploited":false,"published_at":"2026-11-04T01:17:23.413+00:00","url":"https://junglewise.ai/threats/cve-2026-121599-a-vulnerability-was-detected-in-totolink-a950rg-4-1-2cu-5268"},{"cve":"CVE-2026-121598","cvss":9.9,"slug":"cve-2026-121598-a-security-vulnerability-has-been-detected-in-totolink-a950rg-4","title":"TOTOLINK A950RG stack buffer overflow in wireless configuration","severity":"critical","exploited":false,"published_at":"2026-11-04T01:17:23.16+00:00","url":"https://junglewise.ai/threats/cve-2026-121598-a-security-vulnerability-has-been-detected-in-totolink-a950rg-4"},{"cve":"CVE-2026-121597","cvss":9.9,"slug":"cve-2026-121597-a-weakness-has-been-identified-in-totolink-a950rg-4-1-2cu-5268","title":"TOTOLINK A950RG stack buffer overflow in Easy Setup Wizard","severity":"critical","exploited":false,"published_at":"2026-11-04T00:17:27.41+00:00","url":"https://junglewise.ai/threats/cve-2026-121597-a-weakness-has-been-identified-in-totolink-a950rg-4-1-2cu-5268"},{"cve":"CVE-2026-116506","cvss":9.9,"slug":"cve-2026-116506-a-vulnerability-was-determined-in-totolink-a950rg-4-1-2cu-5268","title":"TOTOLINK A950RG command injection in firewall.so","severity":"critical","exploited":false,"published_at":"2026-10-26T21:18:13.047+00:00","url":"https://junglewise.ai/threats/cve-2026-116506-a-vulnerability-was-determined-in-totolink-a950rg-4-1-2cu-5268"},{"cve":"CVE-2026-116504","cvss":9.9,"slug":"cve-2026-116504-a-vulnerability-has-been-found-in-totolink-a950rg-4-1-2cu-5268","title":"TOTOLINK A950RG command injection in cloud upgrade","severity":"critical","exploited":false,"published_at":"2026-10-26T21:18:12.42+00:00","url":"https://junglewise.ai/threats/cve-2026-116504-a-vulnerability-has-been-found-in-totolink-a950rg-4-1-2cu-5268"},{"cve":"CVE-2025-44655","cvss":9.8,"epss":0.0034,"slug":"cve-2025-44655-totolink-routers-incorrect-privilege-assignment-in-vsftpd","title":"TOTOLink Routers incorrect privilege assignment in vsftpd","severity":"critical","exploited":false,"published_at":"2025-07-21T16:15:29.323+00:00","url":"https://junglewise.ai/threats/cve-2025-44655-totolink-routers-incorrect-privilege-assignment-in-vsftpd"},{"cve":"CVE-2026-116505","cvss":9.1,"slug":"cve-2026-116505-a-vulnerability-was-found-in-totolink-a950rg-4-1-2cu-5268","title":"TOTOLINK A950RG command injection in device-information handler","severity":"critical","exploited":false,"published_at":"2026-10-26T21:18:12.73+00:00","url":"https://junglewise.ai/threats/cve-2026-116505-a-vulnerability-was-found-in-totolink-a950rg-4-1-2cu-5268"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}