CVE-2026-51765

Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to insert or replace mesh neighbor records via sending a crafted MQTT message to the csbroker component...

CVE-2026-51765: Improper Access Control

Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to insert or replace mesh neighbor records via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69194

Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to insert or replace mesh neighbor records via sending a crafted MQTT message to the csbroker component...

CVE-2026-51765

The TOTOLINK T6 wireless dual-band Mesh router (version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control flaw in the recvIndirectMeshInfo function. An unauthenticated attacker can exploit this by sending a crafted MQTT message to the cs_broker component to insert or replace me...

PT-2026-84245

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the recvIndirectMeshInfo function allows unauthenticated attackers to insert or replace mesh neighbor records. This is achieved by sending a crafted MQTT message...

CVE-2026-51640

Incorrect access control in the getMeshNeighborTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh neighbor information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51640

The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is vulnerable to incorrect access control in the getMeshNeighborTable function. This flaw allows unauthenticated attackers to obtain sensitive mesh neighbor information by sending a crafted POST request to the /cgi-bin/cstec...

PT-2026-83205

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the getMeshNeighborTable function allows unauthenticated attackers to obtain mesh neighbor information. This is achieved by sending a crafted POST request to the...

EUVD-2026-67926

Incorrect access control in the getMeshNeighborTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh neighbor information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...