CVE-2026-51639

CVE-2026-51639 is an incorrect access control flaw in the getApWiFiSchCfg function of the TOTOLINK T6 router, version 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve AP-specific Wi-Fi scheduling rules , constituting an inform...