CVE-2026-51684

TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 is affected by an incorrect access control flaw in the setStorageCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to alter the storage-related service state, with no user interaction requir...

EUVD-2026-68531

Incorrect access control in the setLanguageCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to modify language configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51691

Incorrect access control in the setUploadSetting function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to manipulate the upload or flash workflow via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51737

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 contain an incorrect access control flaw in the clearTracerouteLog function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to erase traceroute logs, enabling concealment of reconnaissance activity. Th...

CVE-2026-51700

An incorrect access control flaw in the setWiFiAdvancedCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows an unauthenticated remote attacker to degrade wireless behavior by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CVSS 3.1 score is 9.1 (CRITICAL) wi...

CVE-2026-51688

Incorrect access control in the setWiFiSignalCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reduce wireless power or cause a Denial of Service DoS via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-56718

creationtimestamp| type| source ---|---|--- 2026-08-30 20:46:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gjr6e32eybwj7 2026-08-30 20:49:29+00:00| seen| https://bsky.app/profile/suriq.io/post/3mudbczrzqb2f 2026-08-30 23:22:56+00:00| seen|...

CVE-2026-82556

creationtimestamp| type| source ---|---|--- 2026-08-30 18:34:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3shvhizps2ufc...

CVE-2026-82644

creationtimestamp| type| source ---|---|--- 2026-08-30 16:03:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucrd7jjo722...

CVE-2026-82636

creationtimestamp| type| source ---|---|--- 2026-08-30 15:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucnuh3gnn2z 2026-08-30 18:09:50+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mucyfq3wqy2q 2026-08-30 18:09:53+00:00| seen|...

CVE-2026-82544

creationtimestamp| type| source ---|---|--- 2026-08-30 14:34:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/baujrtrh3e6m6...

CVE-2026-82641

creationtimestamp| type| source ---|---|--- 2026-08-30 14:26:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eppzem5eiti2r 2026-08-30 15:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucntzdfan2t 2026-08-31 04:02:56+00:00| seen|...

CVE-2026-55552

creationtimestamp| type| source ---|---|--- 2026-08-30 11:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucafrkawq2o...

CVE-2026-82483

creationtimestamp| type| source ---|---|--- 2026-08-30 10:14:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3oz7m7fecgazc 2026-08-30 12:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-82483...

CVE-2026-14835 SOGO Add Script to Individual Pages Header Footer <= 3.9 - Contributor+ Stored XSS via Post Metabox

The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfilteredhtml capability, allowing users with contributor-level access a...

CVE-2026-14835

CVE-2026-14835 is a Stored XSS vulnerability in the SOGO Add Script to Individual Pages Header Footer WordPress plugin (versions ≤ 3.9 ). The plugin fails to sanitise or escape custom header/footer script values saved from its post metabox and does not restrict input to users with the unfiltered_...

CVE-2026-15980

creationtimestamp| type| source ---|---|--- 2026-08-30 04:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mublpnoyf22e 2026-08-30 05:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mubpml4wj226 2026-08-30 06:07:08+00:00| seen|...

CVE-2026-75759

creationtimestamp| type| source ---|---|--- 2026-08-30 01:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mubbntrvst2u 2026-08-30 02:14:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/54rlv4xt7hs33 2026-08-31 01:04:23+00:00| seen|...

CVE-2026-77012

creationtimestamp| type| source ---|---|--- 2026-08-30 01:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mubbns6sbh2p 2026-08-30 05:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mubmbvx3xf2r...

CVE-2026-16947

creationtimestamp| type| source ---|---|--- 2026-08-30 01:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mubb3wwzap23 2026-08-30 06:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mubpokeexh2b...