CVE-2026-116507

MEDIUM 5.3CVE-2026-116507 · Published 26/10/2026 · updated 27/10/2026

In short

CVE-2026-116507 is a MEDIUM (CVSS 5.3) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function getLanguageCfg of the file global.so. Such manipulation of the argument token leads to information disclosure. The attack may be launched remotely. The exploit is publicly available and might be used.

References

gist.github.com/H3rmesk1t/dd00f9b1c7b90a07c306ae369738f99f
vuldb.com/cve/CVE-2026-116507
vuldb.com/submit/1022556
vuldb.com/vuln/426405
vuldb.com/vuln/426405/cti
totolink.net

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free