CVE-2026-51762

The TOTOLINK T6 wireless dual-band Mesh router (firmware version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control flaw in the meshInfoKick function. An unauthenticated attacker can exploit this by sending a crafted MQTT message to the cs_broker component. This allows the attac...