CVE-2026-51754

Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to overwrite the slave IP inventory state via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69202

Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to overwrite the slave IP inventory state via sending a crafted MQTT message to the csbroker component...

CVE-2026-51754

An incorrect access control flaw in the updateSlaveIpList function of the TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) allows unauthenticated attackers to overwrite the slave IP inventory state by sending a crafted MQTT message to the cs_broker component. The vulnerability is described at the fun...