PT-2026-84520

A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function list tools of the file tools/mcp tool.py of the component MCP Tool. Performing a manipulation results in uncontrolled memory allocation. It is possible to initiate the attack remotely. The...

CVE-2026-51747

Incorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to emit indirect mesh heartbeat information toward the master via sending a crafted MQTT message to the csbroker component...

CVE-2026-51747

CVE-2026-51747 affects TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 . The vulnerability is an incorrect access control in the keepAlive function, allowing unauthenticated attackers to send a crafted MQTT message to the cs_broker component to emit indirect mesh heartbeat information ...

CVE-2026-51748

Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to update stored slave inventory records via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69205

Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to rescan and switch the primary mesh channel via sending a crafted MQTT message to the csbroker component...

PT-2026-84207

Incorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to emit indirect mesh heartbeat information toward the master via sending a crafted MQTT message to the cs broker component...

CVE-2026-51751

Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove a specified slave device from local mesh management data and reboot the system via sending a crafted MQTT message to the csbroker component...

EUVD-2026-69195

Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to overwrite cloud-result tracking files via sending a crafted MQTT message to the csbroker component...

PT-2026-84244

Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to overwrite cloud-result tracking files via sending a crafted MQTT message to the cs broker component...

PT-2026-84359

Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13.07.09 allows a remote attacker to execute arbitrary code via the fromSetCmdlineRun function...

CVE-2026-51742

Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51745

Incorrect access control in the updatePriStaList function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to refresh the primary station list via sending a crafted MQTT message to the csbroker component...

PT-2026-84224

Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to overwrite the slave IP inventory state via sending a crafted MQTT message to the cs broker component...

PT-2026-84204

Incorrect access control in the guest wifi sync function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to disable guest virtual AP interfaces via sending a crafted MQTT message to the cs broker component...

CVE-2026-51756

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the csbroker component...

CVE-2026-51752

CVE-2026-51752 is an incorrect access control vulnerability in the staticInfoSend function of TOTOLINK T6 router, version 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted MQTT message to the cs_broker component, triggering static information reporting to the configured maste...

PT-2026-84238

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the cs broker component...

PT-2026-84241

Incorrect access control in the updateLanIp function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to refresh the LAN address state via sending a crafted MQTT message to the cs broker component...

PT-2026-84349

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access...

CVE-2026-51765

CVE-2026-51765 affects TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 . The root cause is an incorrect access control in the recvIndirectMeshInfo function, reachable via the cs_broker component. An unauthenticated remote attacker can send a crafted MQTT message to insert or replace me...