CVE-2026-51615

TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 is affected by an incorrect access control flaw in the getLanCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain LAN addressing and DHCP configuration information , representing an informati...

CVE-2026-51616

Incorrect access control in the getWanIeCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51616

CVE-2026-51616 affects the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). The vulnerability stems from an incorrect access control in the getWanIeCfg function, allowing unauthenticated attackers to send a crafted POST request to /cgi-bin/cstecgi.cgi and obtain LAN addressing and DHCP confi...

CVE-2026-51620

Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain network topology and interface configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51627

An incorrect access control flaw in the getIptvCfg function of TOTOLINK T6 firmware 4.1.5cu.748_B20211015 allows an unauthenticated attacker to obtain IPTV and IGMP configuration information by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The vulnerability is an information-disclosure ...

CVE-2026-51630

TOTOLINK T6 running firmware 4.1.5cu.748_B20211015 contains an incorrect access control flaw in the getDdnsCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve the device's DDNS configuration , which may expose the domain, username, and pas...

CVE-2026-51622

An incorrect access control vulnerability in the getWanCfg function of TOTOLINK T6 (firmware 4.1.5cu.748_B20211015 ) allows unauthenticated attackers to obtain WAN configuration data by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The exposed WAN configuration may reveal network creden...

EUVD-2026-67904

Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WAN configuration data via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51643

CVE-2026-51643 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . The root cause is an incorrect access control flaw in the getNtpCfg function, which allows unauthenticated attackers to obtain NTP configuration and current time data by sending a crafted POST request to /cgi-b...

CVE-2026-51622

Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WAN configuration data via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51626

Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51654

Incorrect access control in the getScheduleCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain schedule or scheduled-reboot configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51643

Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain NTP configuration and current time data via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67886

Incorrect access control in the getWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain guest Wi-Fi configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67885

Incorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain diagnostic configuration and ping log contents via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67897

Incorrect access control in the getIptvCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain IPTV and IGMP configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67911

Incorrect access control in the getLanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67923

Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain NTP configuration and current time data via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51664

CVE-2026-51664 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . The vulnerability is an incorrect access control in the getTelnetCfg function, which allows unauthenticated attackers to determine the Telnet service enablement status by sending a crafted POST request to /cgi-...

H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 whs41반고늘상@straightSang 1. Riepilogo Riferimento: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2 è un sistema di gestione di database relazionali che fornisce la funzionalità di compilare ed eseguire direttamente codice Java all'interno del motore SQL. Il driver...