2 matches found
CVE-2026-51626
Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
9.1CVSS0.00511EPSS
SaveExploits0References4
CVE-2026-51626: Improper Access Control
Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
9.1CVSS5.8AI score0.00511EPSS
SaveExploits0References2
20