CVE-2026-51650

An incorrect access control vulnerability in the getRemoteCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows an unauthenticated attacker to send a crafted POST request to /cgi-bin/cstecgi.cgi and disclose remote-management enablement status and port information . The ...