CVE-2026-51657

The TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 is vulnerable to an incorrect access control flaw within the getSyslogCfg function. This vulnerability allows unauthenticated attackers to obtain syslog-related configurations by sending a crafted POST request to the /cgi-bin/cstecgi....