571307 matches found
CVE-2026-51650
An incorrect access control vulnerability in the getRemoteCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows an unauthenticated attacker to send a crafted POST request to /cgi-bin/cstecgi.cgi and disclose remote-management enablement status and port information . The ...
CVE-2026-51647
CVE-2026-51647 is an incorrect access control flaw in the getCrpcCfg function of the TOTOLINK T6 router, firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain cloud remote-control status and URL information . The CVS...
CVE-2026-51645
CVE-2026-51645 is an incorrect access control flaw in the getPasswordCfg function of TOTOLINK T6 firmware 4.1.5cu.748_B20211015 . An unauthenticated attacker can obtain the administrative username by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CVSS 3.1 score is 9.8 (Critical) (AV:...
CVE-2026-51658
TOTOLINK T6 router, firmware 4.1.5cu.748_B20211015 , suffers from an incorrect access control flaw in the getDmzCfg function. An unauthenticated remote attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain DMZ configuration information , resulting in a high confidentiality im...
CVE-2026-51640
CVE-2026-51640 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An incorrect access control flaw in the getMeshNeighborTable function allows an unauthenticated attacker on the adjacent network to obtain mesh neighbor information by sending a crafted POST request to /cgi-bin...
CVE-2026-51610
CVE-2026-51610 is an incorrect access control flaw in the RebootSystem function of the TOTOLINK T6 wireless router, firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker on the adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to force an immediate device reb...
CVE-2026-51651
TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) contains an incorrect access control flaw in the getSmartQosCfg function, accessible via a crafted POST request to /cgi-bin/cstecgi.cgi. An unauthenticated attacker on an adjacent network can retrieve Smart QoS configuration and rules, resulting in a l...
CVE-2026-51657
CVE-2026-51657 is an incorrect access control flaw in the getSyslogCfg function of the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve syslog-related configuration from the device. The CNA-...
CVE-2026-51620
CVE-2026-51620 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An incorrect access control flaw in the getNetInfoCfg function allows an unauthenticated, remote attacker to disclose network topology and interface configuration by sending a crafted POST request to /cgi-bin/c...
CVE-2026-51632
TOTOLINK T6 (firmware 4.1.5cu.748_B20211015 ) contains an incorrect access control flaw in the getWiFiAdvancedCfg function. An unauthenticated attacker within the adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve advanced wireless settings. The CVSS 3.1 score is...
CVE-2026-51653
CVE-2026-51653 is an incorrect access control flaw in the getStorageCfg function of the TOTOLINK T6 router running firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker on the adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain storage feature state i...
CVE-2026-51617
TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) suffers from incorrect access control in the getSysStatusCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to disclose sensitive data including operation mode, firmware version, serial number, WAN/LAN IP ...
CVE-2026-51649
CVE-2026-51649 affects the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). The vulnerability is an incorrect access control in the getDiagnosisCfg function, allowing unauthenticated network attackers to retrieve diagnostic configuration and ping log contents by sending a crafted POST reques...
PT-2026-83222
Incorrect access control in the getSyslogCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain syslog-related configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
PT-2026-83345
Name of the Vulnerable Software and Affected Versions Klever-Go versions prior to 1.7.19 Description An issue exists in the processPercentageRoyaltiesTransfer function within core/kapp/accounts/accounts.go where the royalty pool is debited from the sender using SubFromBalance only after the split...
ROS-20260828-73-0016
The vulnerability of the uclogicinputconfigured function in the drivers/hid/hid-uclogic-core.c file of the Linux kernel’s input device subsystem driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
ROS-20260828-73-0018
The vulnerability of the fbconsetfont function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a...
ROS-20260828-73-0001
The vulnerability of the rpitsprobe function in the drivers/input/touchscreen/raspberrypi-ts.c file of the touchscreen driver for the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failur...
Linux Distros Unpatched Vulnerability : CVE-2026-80718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages is the total contiguous backing allocation, i.e., nrunits...
