CVE-2026-114575

LOWCVSS 9.3 · CRITICAL

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has been published and may be used.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse2 posts

ExploitGrid@exploitgrid1d
├ CVE-2026-110264 · GitLab · Integer overflow or wraparound └ CVE-2026-114575 · TOTOLINK A950RG · Command injection via UploadCustomModule
1000035
417 followersView on X
ExploitGrid@exploitgrid1d
[CVE] CVE-2026-114575 [HIGH PRIORITY] CVSS: 10 | Vendor: #totolink #TOTOLINK A950RG https://product.so UploadCustomModule command injection 🔗 https://exploitgrid.net/cve/CVE-2026-114575
1000017
417 followersView on X

Explore more

Back to dashboard