CVE-2026-79745: Missing Authorization

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, the built-in prompt and resource controllers perform no role checking. The mutating POST/PUT /api/prompts and...

CVE-2026-51727

The TOTOLINK T6 wireless dual-band Mesh router (specifically version 4.1.5cu.748_B20211015 ) is susceptible to an incorrect access control vulnerability within the SystemSettings function. An unauthenticated attacker can exploit this flaw by sending a specially crafted POST request to the /cgi-bi...

PT-2026-83934

Incorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to remove Wi-Fi ACL rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51687

The TOTOLINK T6 wireless dual-band Mesh router (version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control mechanism within the setWiFiEasyGuestCf function. An unauthenticated attacker can exploit this by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. This ...

EUVD-2026-68581

Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reconfigure or disable wireless networks via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83834

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the setWiFiSignalCfg function allows unauthenticated attackers to reduce wireless power or cause a Denial of Service DoS, which is a condition where the service...

CVE-2026-51683

Incorrect access control in the setLanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter LAN network configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51711

Incorrect access control in the setWiFiWpsStart function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to open a wireless pairing window via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51711: Improper Access Control

Incorrect access control in the setWiFiWpsStart function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to open a wireless pairing window via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83876

Incorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to alter parental-control behavior via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51721

Incorrect access control in the setPairCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter the mesh pairing state via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68539

Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter access-device policies via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-56718

creationtimestamp| type| source ---|---|--- 2026-08-30 20:46:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gjr6e32eybwj7 2026-08-30 20:49:29+00:00| seen| https://bsky.app/profile/suriq.io/post/3mudbczrzqb2f 2026-08-30 23:22:56+00:00| seen|...

CVE-2026-82556

creationtimestamp| type| source ---|---|--- 2026-08-30 18:34:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3shvhizps2ufc...

CVE-2026-82644

creationtimestamp| type| source ---|---|--- 2026-08-30 16:03:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucrd7jjo722...

CVE-2026-82636

creationtimestamp| type| source ---|---|--- 2026-08-30 15:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucnuh3gnn2z 2026-08-30 18:09:50+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mucyfq3wqy2q 2026-08-30 18:09:53+00:00| seen|...

CVE-2026-82544

creationtimestamp| type| source ---|---|--- 2026-08-30 14:34:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/baujrtrh3e6m6...

CVE-2026-82641

creationtimestamp| type| source ---|---|--- 2026-08-30 14:26:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eppzem5eiti2r 2026-08-30 15:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucntzdfan2t 2026-08-31 04:02:56+00:00| seen|...

CVE-2026-55552

creationtimestamp| type| source ---|---|--- 2026-08-30 11:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucafrkawq2o...

CVE-2026-82483

creationtimestamp| type| source ---|---|--- 2026-08-30 10:14:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3oz7m7fecgazc 2026-08-30 12:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-82483...