CVE-2026-19616

creationtimestamp| type| source ---|---|--- 2026-08-31 14:14:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/35vjztok5lmwx 2026-08-31 20:52:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mufryf3o4g2h...

CVE-2026-51666

Incorrect access control in the setWizardCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reconfigure WAN, Wi-Fi, and device initialization state via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-81693

creationtimestamp| type| source ---|---|--- 2026-08-31 12:02:29+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mueudrrgoe25 2026-09-03 13:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mumkzrd47l2l...

CVE-2026-73511

creationtimestamp| type| source ---|---|--- 2026-08-31 11:57:46+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3mueu3drtvg2r 2026-10-07 10:50:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117399237589042553...

CVE-2026-82670

creationtimestamp| type| source ---|---|--- 2026-08-31 10:31:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/axohj74snk25g...

CVE-2026-82874

creationtimestamp| type| source ---|---|--- 2026-08-31 10:25:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7mzbbw6jjpkml...

CVE-2026-46470

creationtimestamp| type| source ---|---|--- 2026-08-31 09:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muemf3htjg2f...

CVE-2026-58301 Apache Shiro: Server-side POST request may be steered to an alternate host

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

Streamlining Application and API Discovery and Governance

...

CVE-2026-82597

creationtimestamp| type| source ---|---|--- 2026-08-31 02:26:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jdmsvt5spjy6z...

CVE-2026-82598

creationtimestamp| type| source ---|---|--- 2026-08-31 02:20:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6lopcegp3ljiw...

CVE-2026-82599

creationtimestamp| type| source ---|---|--- 2026-08-31 02:14:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/f5lru4e2f7ouh...

CVE-2026-51681

Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to expose WAN-side administration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68646

Incorrect access control in the setWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter when Wi-Fi is available via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51672

Incorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain the roaming enablement flag via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51727

Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to retrieve administrative import and export endpoint information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51704

Incorrect access control in the setWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter mesh configurations via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68640

Incorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter parental-control behavior via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83830

Incorrect access control in the setLanCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to alter LAN network configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83832

Incorrect access control in the setWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to reconfigure or disable wireless networks via sending a crafted POST request to /cgi-bin/cstecgi.cgi...