CVE-2026-51639: Improper Access Control

Incorrect access control in the getApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain AP-specific Wi-Fi scheduling rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51629: Improper Access Control

Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain static DHCP reservation rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51624: Improper Access Control

Incorrect access control in the getStationMacByIp function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain a client MAC address via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51619: Improper Access Control

Incorrect access control in the getOnlineClient function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain online client information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51614: Improper Access Control

Incorrect access control in the getAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain access-device policy and client state information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51656: Improper Access Control

Incorrect access control in the getVpnPassCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain VPN pass-through and WAN ping filter settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51649: Improper Access Control

Incorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain diagnostic configuration and ping log contents via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83211

Incorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain parental-control rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67904

Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WAN configuration data via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51614

The TOTOLINK T6 router (version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control flaw within the getAccessDeviceCfg function. This vulnerability allows unauthenticated attackers to obtain sensitive access-device policy and client state information by sending a crafted POST req...

CVE-2026-51647

Incorrect access control in the getCrpcCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain cloud remote-control status and URL information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51633

The TOTOLINK T6 router, specifically version 4.1.5cu.748_B20211015 , is vulnerable to incorrect access control within the getWiFiEasyGuestCfg function. This flaw allows unauthenticated attackers to obtain simplified guest Wi-Fi configurations, including sensitive guest credentials , by sending a ...

CVE-2026-51632

Incorrect access control in the getWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain advanced wireless settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51619

The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , contains an incorrect access control vulnerability in the getOnlineClient function. This flaw allows unauthenticated attackers to obtain online client information by sending a crafted POST request to the /cgi-bin/cstecgi.cgi...

CVE-2026-51641

The TOTOLINK T6 (firmware version 4.1.5cu.748_B20211015 ) is affected by an incorrect access control vulnerability within the getWiFiMeshConfig function. An unauthenticated attacker can exploit this by sending a crafted POST request to /cgi-bin/cstecgi.cgi. This allows the attacker to obtain sens...

CVE-2026-51646

The TOTOLINK T6 router, specifically version 4.1.5cu.748_B20211015 , is vulnerable to an incorrect access control flaw in the getParentalRules function. An unauthenticated attacker can obtain parental-control rules by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. No informa...

CVE-2026-51647

The TOTOLINK T6 router running firmware version 4.1.5cu.748_B20211015 is vulnerable to an incorrect access control flaw in the getCrpcCfg function. This vulnerability allows unauthenticated attackers to obtain cloud remote-control status and URL information by sending a crafted POST request to th...

CVE-2026-51636

A vulnerability exists in the TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 due to incorrect access control in the getWiFiAclRules function. This flaw allows unauthenticated attackers to obtain Wi-Fi ACL rules by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. Th...

CVE-2026-51627

The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is vulnerable to an incorrect access control flaw in the getIptvCfg function. An unauthenticated attacker can exploit this by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. Successful exploitation allow...

CVE-2026-51642

The TOTOLINK T6 (version 4.1.5cu.748_B20211015) is susceptible to an incorrect access control vulnerability within the getMeshRoutingTable function. This flaw allows unauthenticated attackers to retrieve sensitive mesh routing information by sending a crafted POST request to the /cgi-bin/cstecgi....