{"affected":[{"product":"A950RG","source":"CNA: VulDB","vendor":"TOTOLINK","versions":[{"status":"affected","version":"4.1.2cu.5268_B20221104"}]}],"cveId":"CVE-2026-116506","cwes":["CWE-77","CWE-74"],"description":"A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.","epss":{"date":"2026-11-02","percentile":0.79449,"score":0.0188},"exploits":[{"kind":"exploit","source":"CNA: VulDB","url":"https://gist.github.com/H3rmesk1t/1046036a8601e93f375754e11307bfc8"}],"kev":null,"metrics":[{"score":9.4,"severity":"critical","source":"CNA: VulDB","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P","version":"4.0"},{"score":9.9,"severity":"critical","source":"CNA: VulDB","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","version":"3.1"},{"score":9.9,"severity":"critical","source":"CNA: VulDB","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","version":"3.0"},{"score":9,"severity":"critical","source":"CNA: VulDB","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR","version":"2.0"}],"modifiedAt":1793643210833,"publishedAt":1793048416563,"references":[{"source":"CNA: VulDB","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/vuln/426404"},{"source":"CNA: VulDB","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/426404/cti"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/cve/CVE-2026-116506"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/1022555"},{"source":"CNA: VulDB","tags":["exploit"],"url":"https://gist.github.com/H3rmesk1t/1046036a8601e93f375754e11307bfc8"},{"source":"CNA: VulDB","tags":["product"],"url":"https://www.totolink.net/"}],"remediation":[],"revision":"3ffefed12283c6c4bd98312a41828a02f20a65bdf562ca2799a6cad33f63f24f","sources":[{"modifiedAt":1793643210833,"name":"CNA: VulDB","retrievedAt":1793646528112,"url":"https://www.cve.org/CVERecord?id=CVE-2026-116506"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793646531621,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-116506"}],"ssvc":{"assessedAt":1793643196702,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"TOTOLINK A950RG firewall.so apmib_set command injection","updatedAt":1793646531621}