EUVD-2026-67918

Incorrect access control in the getWanInfo function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WAN information returned by the endpoint via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67903

Incorrect access control in the getDdnsStatus function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DDNS runtime status and public IP information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51631

Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS runtime status via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51621

Incorrect access control in the getInitCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive device configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51616

Incorrect access control in the getWanIeCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain LAN addressing and DHCP configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67901

Incorrect access control in the getStationMacByIp function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain a client MAC address via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83199

Incorrect access control in the getWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain core wireless settings, including SSIDs and Wi-Fi keys, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51629

The TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 is vulnerable to an incorrect access control flaw in the getStaticDhcpRules function. An unauthenticated attacker can obtain static DHCP reservation rules by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. Exploit...

CVE-2026-51630

The TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 is vulnerable to an incorrect access control flaw in the getDdnsCfg function. An unauthenticated attacker can exploit this by sending a crafted POST request to /cgi-bin/cstecgi.cgi. This vulnerability allows the attacker to obtain sen...

CVE-2026-51634

The TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 is susceptible to an incorrect access control vulnerability in the getWiFiBasicCfg function. An unauthenticated attacker can exploit this by sending a crafted POST request to /cgi-bin/cstecgi.cgi. This flaw allows the attacker to obta...

CVE-2026-51643

The TOTOLINK T6 (firmware version 4.1.5cu.748_B20211015 ) is affected by an incorrect access control vulnerability within the getNtpCfg function. This flaw allows unauthenticated attackers to retrieve NTP configuration and current time data by sending a crafted POST request to the /cgi-bin/cstecg...

CVE-2026-51665

The TOTOLINK T6 router running firmware version 4.1.5cu.748_B20211015 is affected by an incorrect access control vulnerability in the getTracerouteCfg function. This flaw allows unauthenticated attackers to obtain traceroute diagnostic logs by sending a crafted POST request to the /cgi-bin/cstecg...

CVE-2026-51615

The TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 is vulnerable to an incorrect access control flaw within the getLanCfg function. An unauthenticated attacker can exploit this by sending a crafted POST request to /cgi-bin/cstecgi.cgi , which allows them to obtain sensitive LAN addres...

CVE-2026-51626

The TOTOLINK T6 router running firmware version 4.1.5cu.748_B20211015 is vulnerable to an incorrect access control flaw in the getWiFiWpsCfg function. This vulnerability allows unauthenticated attackers to obtain WPS configuration details, including the current PIN , by sending a crafted POST req...

CVE-2026-51662

The TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 is vulnerable to an incorrect access control flaw in the getCloudSrvCheckStatus function. This vulnerability allows unauthenticated attackers to obtain sensitive cloud firmware check status information by sending a crafted POST reques...

CVE-2026-51631

The TOTOLINK T6 (firmware version 4.1.5cu.748_B20211015 ) is affected by an incorrect access control vulnerability within the getStaticDhcpRules function. An unauthenticated attacker can exploit this by sending a crafted POST request to /cgi-bin/cstecgi.cgi to obtain WPS runtime status . No speci...

CVE-2026-51618: Improper Access Control

Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain setup wizard and onboarding configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51630: Improper Access Control

Incorrect access control in the getDdnsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DDNS configuration, including domain, username, and password, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51638: Improper Access Control

Incorrect access control in the getWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain guest Wi-Fi configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51653: Improper Access Control

Incorrect access control in the getStorageCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain storage feature state information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...