CVE-2026-51666

Incorrect access control in the setWizardCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reconfigure WAN, Wi-Fi, and device initialization state via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-81693

creationtimestamp| type| source ---|---|--- 2026-08-31 12:02:29+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mueudrrgoe25 2026-09-03 13:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mumkzrd47l2l...

CVE-2026-73511

creationtimestamp| type| source ---|---|--- 2026-08-31 11:57:46+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3mueu3drtvg2r 2026-10-07 10:50:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117399237589042553...

CVE-2026-82670

creationtimestamp| type| source ---|---|--- 2026-08-31 10:31:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/axohj74snk25g...

CVE-2026-82874

creationtimestamp| type| source ---|---|--- 2026-08-31 10:25:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7mzbbw6jjpkml...

CVE-2026-46470

creationtimestamp| type| source ---|---|--- 2026-08-31 09:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muemf3htjg2f...

CVE-2026-58301 Apache Shiro: Server-side POST request may be steered to an alternate host

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

Streamlining Application and API Discovery and Governance

...

CVE-2026-82597

creationtimestamp| type| source ---|---|--- 2026-08-31 02:26:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jdmsvt5spjy6z...

CVE-2026-82598

creationtimestamp| type| source ---|---|--- 2026-08-31 02:20:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6lopcegp3ljiw...

CVE-2026-82599

creationtimestamp| type| source ---|---|--- 2026-08-31 02:14:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/f5lru4e2f7ouh...

EUVD-2026-68646

Incorrect access control in the setWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter when Wi-Fi is available via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51727

Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to retrieve administrative import and export endpoint information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51704

Incorrect access control in the setWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter mesh configurations via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68640

Incorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter parental-control behavior via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83830

Incorrect access control in the setLanCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to alter LAN network configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83832

Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to reconfigure or disable wireless networks via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51713

Incorrect access control in the setManualDialCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to manipulate WAN dial state via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68538

Incorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reconfigure uplink settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83836

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the setWanCfg function allows unauthenticated attackers to alter upstream provisioning and connectivity. This is achieved by sending a crafted POST request to th...