EUVD-2026-68637

Incorrect access control in the setApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter wireless availability windows via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51712

Incorrect access control in the setApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter wireless availability windows via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-84031

Unauthenticated Server Side Request Forgery SSRF in MapSVG = 8.15.0 versions...

PT-2026-84027

Unauthenticated PHP Object Injection in Tickera = 3.6.0.2 versions...

EUVD-2026-68585

Incorrect access control in the setWanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter upstream provisioning and connectivity via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68586

Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to manipulate the upload or flash workflow via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83959

When Ethernet bridging is enabled CONFIG NET ETHERNET BRIDGE, eth bridge input process in subsys/net/l2/ethernet/bridge/bridge input.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called eth bridge...

CVE-2026-51695

An incorrect access control flaw in the setDdnsCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows an unauthenticated attacker to alter the device's dynamic DNS configuration by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The flaw scores CVSS 3.1: 7.5 (High...

CVE-2026-51679

TOTOLINK T6 router firmware 4.1.5cu.748_B20211015 is affected by an incorrect access control flaw in the setPasswordCfg function. An unauthenticated remote attacker can change the administrator account password by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The vulnerability is rated ...

EUVD-2026-68512

Incorrect access control in the getWiFiIpMacTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain Wi-Fi client MAC-to-IP mappings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68544

Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to expose WAN-side administration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51672

CVE-2026-51672 is an incorrect access control flaw in the getRoamingCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). An unauthenticated remote attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain the roaming enablement flag, resulting in information ...

CVE-2026-51672

Incorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain the roaming enablement flag via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68537

Incorrect access control in the setScheduleCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to configure forced reboot tasks via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51152

CVE-2026-51152 is a critical SSRF (CVSS 9.1) in QD (a HAR file processing tool by QD-Today), affecting versions 20220208 through 20250803 . The root cause is in Fetcher.build_request() in libs/fetcher.py, which constructs an httpclient.HTTPRequest from user-supplied JSON without validating URL sc...

CVE-2026-51670

TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) contains an incorrect access control flaw in the getSlaveUpdate function. An unauthenticated remote attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to query slave upgrade status and affect upgrade bookkeeping. CISA SSVC rates t...

CVE-2026-51673

Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter time synchronization settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68592

Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter IPTV service configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51688

An incorrect access control flaw in the setWiFiSignalCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows an unauthenticated attacker to send a crafted POST request to /cgi-bin/cstecgi.cgi, resulting in a reduction of wireless power or a Denial of Service (DoS) . No spe...

EUVD-2026-68534

Incorrect access control in the getCloudDownloadStatus function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain cloud firmware download state information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...