CVE-2026-51641

CVE-2026-51641 is an incorrect access control flaw in the getWiFiMeshConfig function of TOTOLINK T6 firmware 4.1.5cu.748_B20211015 . Unauthenticated attackers can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain mesh configuration and runtime state information without prior authentic...