Description
A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-11-04
Score: 9.4 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution via stack-based buffer overflow
Action: Immediate Patch
AI Analysis

Impact

This vulnerability arises from an unbounded use of strcpy in the Basic Wireless Configuration Handler, leading to a stack-based buffer overflow. The flaw allows an attacker to supply an overly long wepkey argument to \/cgi-bin\/cstecgi.cgi, causing the vulnerable firmware to overwrite the stack and potentially execute arbitrary code. The weakness is categorized under CWE‑119 and CWE‑121.

Affected Systems

The affected product is the TOTOLINK A950RG router running firmware version 4.1.2cu.5268_B20221104. No other affected versions are listed, but the issue is specific to this device model and firmware release.

Risk and Exploitability

The CVSS score of 9.4 indicates critical severity, and the vulnerability is known to be exploitable remotely. Although no EPSS score is available, publicly disclosed exploits have been identified, and the vulnerability is not yet listed in CISA’s KEV catalog. The attack vector is remote, implying that an adversary can trigger the overflow from outside the local network without requiring privileged access.

Generated by OpenCVE AI on November 4, 2026 at 08:46 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest TOTOLINK A950RG firmware update that addresses the buffer overflow; the vendor has already patched the flaw in newer releases.
  • If a suitable firmware update is unavailable in a timely manner, restrict external access to the /cgi-bin/cstecgi.cgi endpoint by configuring firewall rules to allow only trusted IP ranges.
  • Continuously monitor router logs for anomalous requests to /cgi-bin/cstecgi.cgi and remediate any unauthorized attempts by updating firmware or tightening network controls.

Generated by OpenCVE AI on November 4, 2026 at 08:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 04 Nov 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 04 Nov 2026 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Totolink a950rg
Vendors & Products Totolink a950rg

Wed, 04 Nov 2026 00:45:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Title TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow
First Time appeared Totolink
Totolink a950rg Firmware
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:o:totolink:a950rg_firmware:*:*:*:*:*:*:*:*
Vendors & Products Totolink
Totolink a950rg Firmware
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.9, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Totolink A950rg A950rg Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-11-04T18:59:12.828Z

Reserved: 2026-11-03T16:14:31.726Z

Link: CVE-2026-121598

cve-icon Vulnrichment

Updated: 2026-11-04T18:59:08.048Z

cve-icon NVD

Status : Deferred

Published: 2026-11-04T01:17:23.160

Modified: 2026-11-04T19:17:31.053

Link: CVE-2026-121598

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-04T09:00:16Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow