TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38556)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setStaticDhcpRules function. Attackers can exploit this vulnerability by sending a specially crafted PO...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38560)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setUploadSetting function. Attackers can exploit this vulnerability by sending specially crafted POST...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38423)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the NTPSyncWithHost function. Attackers can exploit this vulnerability by sending a specially crafted POST...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38434)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setPairCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST reque...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38568)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from an improper access control in the setWiFiEasyCfg function. Attackers can exploit this vulnerability by sending a specially crafted POS...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38586)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the guestwifisync function. Attackers can exploit this vulnerability by sending a specially crafted MQTT...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38582)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from an improper access control in the clearDiagnosisLog function. Attackers can exploit this vulnerability by sending a specially crafted...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38594)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability in access control. This vulnerability stems from an improper access control in the recvIndirectMeshInfo function. Attackers can exploit this vulnerability by sending specially crafted MQTT...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38420)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the informSlaveUpdate function. Attackers can exploit this vulnerability by sending a specially crafted POS...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38407)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the delPortForwardRules function. Attackers can exploit this vulnerability by sending a specially crafted...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38406)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to improper access control. This vulnerability stems from issues with the delParentalRules function, allowing attackers to exploit it by sending a specially crafted POST request to th...

PT-2026-94106

Name of the Vulnerable Software and Affected Versions Craft CMS versions 5.0.0 through 5.10.12 Description A broken access control flaw exists in the 'actions/nested-elements/reorder' endpoint. When an authenticated control panel user with viewEntries and viewPeerEntries permissions but lacking...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38593)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the recvClearPairCfg function. Attackers can exploit this vulnerability by sending a specially crafted MQT...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to compromise the system.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system using network protocols...

The vulnerability of the mod_ssl component of the Oracle HTTP Server allows a hacker to gain unauthorized access to create, delete, or modify data.

The vulnerability of the modssl component of the Oracle HTTP Server is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to create, delete, or modify data using the HTTP network protocol...

The vulnerability of the WebLogic Server Proxy Plug-In for third-party web servers within the Oracle Fusion Middleware software platform allows a malicious individual to gain unauthorized access to create, delete, or modify data.

The vulnerability of the WebLogic Server Proxy Plug-In for third-party web servers within the Oracle Fusion Middleware software platform is related to access control errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to create, delete, or modify data using t...

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system allows a perpetrator to gain full control over the application.

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools management system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...

The vulnerability of the Target Management component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the system.

The vulnerability of the Target Management component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the system using the HTTPS protocol...

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform allows a hacker to gain full control over the application.

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTPS protocol...

The vulnerability of the JavaFX component of Oracle Java SE software allows a hacker to compromise the system.

The vulnerability of the JavaFX component of Oracle Java SE software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system using network protocols...