CVE-2026-51620

Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain network topology and interface configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51616

Incorrect access control in the getWanIeCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51627

Incorrect access control in the getIptvCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IPTV and IGMP configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51628

CVE-2026-51628 is an incorrect access control vulnerability in the getGenerateWiFiWpsPin function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). An unauthenticated network attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to generate and retrieve a new WPS PIN , enabl...

CVE-2026-51638

Incorrect access control in the getWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain guest Wi-Fi configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51615

CVE-2026-51615 affects the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). The root cause is an incorrect access control in the getLanCfg function, which allows an unauthenticated attacker to obtain LAN addressing and DHCP configuration information by sending a crafted POST request to /cgi-...

CVE-2026-51629

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 are affected by an incorrect access control flaw in the getStaticDhcpRules function. An unauthenticated attacker on the adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to read static DHCP reservation rules. The im...

CVE-2026-51616

CVE-2026-51616 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An incorrect access control flaw in the getWanIeCfg function allows an unauthenticated remote attacker to send a crafted POST request to /cgi-bin/cstecgi.cgi and retrieve LAN addressing and DHCP configuration i...

CVE-2026-51619

CVE-2026-51619 is an incorrect access control vulnerability in the getOnlineClient function of TOTOLINK T6 firmware 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain online client information (connected device details) without an...

CVE-2026-51618

CVE-2026-51618 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . The root cause is incorrect access control in the getWizardCfg function, which allows unauthenticated remote attackers to obtain setup wizard and onboarding configuration information by sending a crafted POST r...

EUVD-2026-67903

Incorrect access control in the getDdnsStatus function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DDNS runtime status and public IP information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51634

TOTOLINK T6 (firmware 4.1.5cu.748_B20211015 ) has an incorrect access control flaw in the getWiFiBasicCfg function. An unauthenticated attacker on the adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve core wireless settings, including SSIDs and Wi-Fi keys . The ...

CVE-2026-51665

Incorrect access control in the getTracerouteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain traceroute diagnostic logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51619

Incorrect access control in the getOnlineClient function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain online client information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51662

Incorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain cloud firmware check status information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51630

An incorrect access control flaw in the getDdnsCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) allows an unauthenticated attacker on the same network segment to send a crafted POST request to /cgi-bin/cstecgi.cgi and retrieve the router's DDNS configuration , including dom...

CVE-2026-51623

An incorrect access control vulnerability in the getDdnsStatus function of TOTOLINK T6 router firmware version 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain DDNS runtime status and public IP information by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The flaw results...

CVE-2026-51628

Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to generate and retrieve a new WPS PIN via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51622

CVE-2026-51622 is an incorrect access control vulnerability in the getWanCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). An unauthenticated attacker can obtain WAN configuration data by sending a crafted POST request to /cgi-bin/cstecgi.cgi . The vulnerability is rated C...

CVE-2026-51625

Incorrect access control in the getWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive information such as SSIDs and Wi-Fi keys, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...