CVE-2026-51724

Incorrect access control in the delSmartQosCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove Smart QoS rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51724

TOTOLINK T6 router, firmware 4.1.5cu.748_B20211015 , is affected by an incorrect access control flaw in the delSmartQosCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to remove Smart QoS rules , rated CVSS 3.1 9.8 (Critical) with high impact on co...