CVE-2026-51741

An incorrect access control flaw in the clearDiagnosisLog function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows an unauthenticated remote attacker to erase diagnosis logs by sending a crafted POST request to /cgi-bin/cstecgi.cgi . The assigned CVSS 3.1 score is 9.8 (CRITICAL...