CVE-2026-51763

An incorrect access control flaw in the freeStaClient function of TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) allows unauthenticated network attackers to forcibly disconnect wireless clients by sending a crafted MQTT message to the cs_broker component. The CVSS v3.1 score is 9.8 (Critical) with ...