CVE-2026-51634

TOTOLINK T6 wireless router (firmware 4.1.5cu.748_B20211015 ) is affected by an incorrect access control flaw in the getWiFiBasicCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve core wireless settings, including SSIDs and Wi-Fi keys , w...