597025 matches found
PT-2026-84245
Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to insert or replace mesh neighbor records via sending a crafted MQTT message to the cs broker component...
PT-2026-84221
Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to rescan and switch the primary mesh channel via sending a crafted MQTT message to the cs broker component...
CVE-2026-51788
CVE-2026-51788 affects cleverange_auth v0.1.10 (a Django authentication package), where a remote, unauthenticated attacker can trigger a Denial of Service through resource exhaustion. The vulnerability involves the account_verification function and accounts/models.py component: every new User obj...
CVE-2026-51767
CVE-2026-51767 affects the TOTOLINK T6 (version 4.1.5cu.748_B20211015 ), an IoT device. An incorrect access control flaw in the recvClearPairCfg function of the cs_broker component allows an unauthenticated attacker to send a crafted MQTT message that resets the pairing state and reboots the devi...
CVE-2026-51769
CVE-2026-51769 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . The vulnerability is an incorrect access control in the remoteCloudUpdateCheck function, which interacts with the cs_broker component. An unauthenticated attacker can send a crafted MQTT message to trigger a re...
CVE-2026-51770
TOTOLINK T6 (version 4.1.5cu.748_B20211015 ) is affected by an incorrect access control vulnerability in the sendToMasterQosConfig function. An unauthenticated attacker can forward attacker-controlled QoS settings to the master by sending a crafted MQTT message to the cs_broker component. No spec...
CVE-2026-51752
CVE-2026-51752 is an incorrect access control vulnerability in the staticInfoSend function of TOTOLINK T6 router, version 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted MQTT message to the cs_broker component, triggering static information reporting to the configured maste...
CVE-2026-51765
CVE-2026-51765 affects the TOTOLINK T6 mesh router on firmware 4.1.5cu.748_B20211015 . The root cause is an incorrect access control in the recvIndirectMeshInfo function, reachable through the cs_broker component. An unauthenticated attacker can send a crafted MQTT message to insert or replace me...
CVE-2026-51745
An incorrect access control flaw in the updatePriStaList function of the cs_broker component on TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) allows an unauthenticated, network-based attacker to refresh the primary station list by sending a crafted MQTT message. The CNA rates it CVSS 3.1 5.3 (Medi...
CVE-2026-51770
Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to forward attacker-controlled QoS settings to the master via sending a crafted MQTT message to the csbroker component...
PT-2026-84207
Incorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to emit indirect mesh heartbeat information toward the master via sending a crafted MQTT message to the cs broker component...
CVE-2026-51747
CVE-2026-51747 affects TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 . The vulnerability is an incorrect access control in the keepAlive function, allowing unauthenticated attackers to send a crafted MQTT message to the cs_broker component to emit indirect mesh heartbeat information ...
CVE-2026-51757
CVE-2026-51757 is an incorrect access control vulnerability in the meshSlaveUpdate function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker can trigger a firmware download or flash workflow on the slave device by sending a crafted MQTT message to the cs_broker ...
PT-2026-84238
Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the cs broker component...
PT-2026-84219
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.0.2. This is due to insufficient validation of multi-file upload chunk state in the GFAsyncUpload::upload function, where public form state URL hashes can be reused as chunk...
PT-2026-84224
Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to overwrite the slave IP inventory state via sending a crafted MQTT message to the cs broker component...
PT-2026-84241
Incorrect access control in the updateLanIp function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to refresh the LAN address state via sending a crafted MQTT message to the cs broker component...
PT-2026-84298
A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbool=true. Executing a manipulation of the argument Value can lead to sql injection. The attack may be performed from remote. The...
PT-2026-84204
Incorrect access control in the guest wifi sync function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to disable guest virtual AP interfaces via sending a crafted MQTT message to the cs broker component...