CVE-2026-51650

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 are affected by an incorrect access control flaw in the getRemoteCfg function, reachable via a crafted POST request to /cgi-bin/cstecgi.cgi . The vulnerability allows unauthenticated attackers to retrieve the remote-management enablement ...

EUVD-2026-67884

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...