EUVD-2026-68009

Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger wireless scans and retrieve AP-client scan results via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51663

CVE-2026-51663 is an incorrect access control vulnerability in the getWiFiApcliScan function of the TOTOLINK T6 router, firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker can trigger a wireless scan and retrieve AP-client scan results by sending a crafted POST request to /cgi-bi...