CVE-2026-51677

Incorrect access control in the setUPnPCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to change UPnP service state via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51678

Incorrect access control in the setSyslogCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter logging behavior via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51675

Incorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reconfigure uplink settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51677

TOTOLINK T6 router firmware 4.1.5cu.748_B20211015 contains an incorrect access control flaw in the setUPnPCfg function, accessible via the /cgi-bin/cstecgi.cgi endpoint. An unauthenticated network attacker can send a crafted POST request to change the UPnP service state , achieving high confident...

CVE-2026-51671

TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 contains an incorrect access control flaw in the getCloudDownloadStatus function, exposed through the endpoint /cgi-bin/cstecgi.cgi. An unauthenticated attacker can send a crafted POST request to retrieve cloud firmware download state information...

CVE-2026-51675

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 contain an incorrect access control flaw in the setWanIeCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to reconfigure the device's uplink settings, achieving high confidentiality and inte...

CVE-2026-51669

TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 is affected by an incorrect access control flaw in the getPairCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain pairing and mesh-slave configuration data. The CVSS 3.1 score is 9.1 (Critic...

CVE-2026-51667

The TOTOLINK T6 router (version 4.1.5cu.748_B20211015 ) is affected by an incorrect access control flaw in the getWiFiIpMacTable function. An unauthenticated attacker on the adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain Wi-Fi client MAC-to-IP mappings , a low-...

CVE-2026-51683

TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) contains an incorrect access control flaw in the setLanCfg function. An unauthenticated attacker on the adjacent network can alter LAN network configuration by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CVSS v3.1 score is 4.3 (...

EUVD-2026-68743

Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reset the device configuration and reboot the device via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51738

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 are affected by an incorrect access control flaw in the LoadDefSettings function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to reset the device's configuration and trigger a reboot, resulting in h...

CVE-2026-51711

CVE-2026-51711 is an incorrect access control vulnerability in the setWiFiWpsStart function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to open a WPS (Wi-Fi Protected Setup) pairing window , rated...

CVE-2026-51725

CVE-2026-51725 is an incorrect access control vulnerability in the NTPSyncWithHost function of TOTOLINK T6 (version 4.1.5cu.748_B20211015). An unauthenticated remote attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to change the device clock, rated CVSS 9.1 (CRITICAL) with high co...

CVE-2026-51687

An incorrect access control vulnerability in the setWiFiEasyGuestCf function of the TOTOLINK T6 wireless router (firmware 4.1.5cu.748_B20211015 ) allows unauthenticated attackers to create or weaken guest wireless access by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The vulnerability...

CVE-2026-51694

CVE-2026-51694 affects TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 . An incorrect access control flaw in the setStaticDhcpRules function, exposed via the endpoint /cgi-bin/cstecgi.cgi , allows an unauthenticated attacker to add or modify static DHCP rules by sending a crafted POST ...

CVE-2026-51722

CVE-2026-51722 affects the TOTOLINK T6 Wi-Fi router (firmware 4.1.5cu.748_B20211015). An incorrect access control flaw in the setWiFiRepeaterCfg function allows an unauthenticated attacker to send a crafted POST request to /cgi-bin/cstecgi.cgi and repoint the device to an attacker-controlled upst...

CVE-2026-51718

TOTOLINK T6 firmware 4.1.5cu.748_B20211015 has an incorrect access control flaw in the delStaticDhcpRules function, allowing an unauthenticated attacker to remove static DHCP reservations by sending a crafted POST request to /cgi-bin/cstecgi.cgi . The vulnerability is rated CVSS 9.8 (Critical) wi...

CVE-2026-51691

Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to manipulate the upload or flash workflow via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51688

Incorrect access control in the setWiFiSignalCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reduce wireless power or cause a Denial of Service DoS via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51700

An incorrect access control flaw in the setWiFiAdvancedCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows an unauthenticated remote attacker to degrade wireless behavior by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CVSS 3.1 score is 9.1 (CRITICAL) wi...