CRITICALCVSS v3.1 9.1Vulnerability
CVE-2026-116505
A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched remotely. The exploit has been made public and could be used.
Properties
- Severity
- CRITICAL
- Nvd fetched at
- 2026-10-26T23:20:21.485325+00:00
- Cvss score
- 9.1
- Cvss severity
- CRITICAL
- Retrieved at
- 2026-10-26T23:21:23+00:00
- Score
- 9.1
- Last source
- NVD
- Cvss version
- 3.1
- Cve id
- CVE-2026-116505
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- First seen by Signal
- 2026-10-26T23:13:25+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Published at
- 2026-10-26T21:18:12.730
- Last modified
- 2026-10-26T21:18:12.730
Related Entities (2)
Explore deeper with Ninja Signal's threat intelligence graph