3 matches found
CVE-2026-51680
Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to modify LED behavior via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
9.1CVSS0.00286EPSS
SaveExploits0References4
CVE-2026-51680
Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to modify LED behavior via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
0.00286EPSS
SaveExploits0References4
EUVD-2026-68543
Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to modify LED behavior via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
9.1CVSS5.9AI score0.00286EPSS
SaveExploits0References4
20