TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38436)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from an improper access control in the setPasswordCfg function. Attackers can exploit this vulnerability by sending a specially crafted POS...

CVE-2026-51679: Improper Access Control

Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to change the administrator account via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51679

Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to change the administrator account via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51679

Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to change the administrator account via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

org.openidentityplatform.openam:openam-slf4j (>=16.0.1, <=16.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (>=5.0.1, <=5.1.1) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (>=5.0.1, <=5.1.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =5.0.1, =16.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.1.1 Source cves: CVE-2026-73644 Source advisory: OSV:GHSA-P279-2CQP-84JG...

org.openidentityplatform.openam:openam-slf4j (>=16.0.1, <=16.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (>=5.0.1, <=5.1.1) +5 more potentially affected by unknown CVE via org.openidentityplatform.opendj:opendj-server-legacy (>=5.0.1, <=5.1.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =5.0.1, =16.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.1.1 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGOPENIDENTITYPLATFORMOPENDJ-18313059...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.12), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.12) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.12)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.13), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.13) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.13)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.14), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.14) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.14)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.3), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.3) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.3)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.openam:openam-slf4j (15.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (4.8.1) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.8.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.1 -...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.1), org.openidentityplatform.opendj:opendj-embedded (4.9.1) +4 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.9...

org.openidentityplatform.openam:openam-slf4j (15.1.5), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.3) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.3)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.5 -...

org.openidentityplatform.openam:openam-slf4j (15.1.6), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.4) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.4)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.6 -...

org.openidentityplatform.openam:openam-slf4j (15.2.2), org.openidentityplatform.opendj:opendj-dsml-servlet (4.10.2) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.10.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.2.2 -...

org.openidentityplatform.openam:embedded.opendj (>=14.6.1.1, <=14.6.1.2), org.openidentityplatform.openam:openam-slf4j (14.6.1) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.9)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:embedded.opendj...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.15), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.15) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.15)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.1), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.1) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.7), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.7) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.7)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.openam:openam-slf4j (>=15.1.2, <=15.1.3), org.openidentityplatform.opendj:opendj-dsml-servlet (4.8.2) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.8.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j =15.1.2,...