CVE-2026-51657

The TOTOLINK T6 (version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control flaw within the getSyslogCfg function. This vulnerability allows unauthenticated attackers to obtain sensitive syslog-related configuration details by sending a crafted POST request to the /cgi-bin/cstec...

CVE-2026-51610

The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is vulnerable to an incorrect access control flaw within the RebootSystem function. This vulnerability allows unauthenticated attackers to arbitrarily force an immediate reboot of the device by sending a crafted POST request...

CVE-2026-51640

The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is vulnerable to incorrect access control in the getMeshNeighborTable function. This flaw allows unauthenticated attackers to obtain sensitive mesh neighbor information by sending a crafted POST request to the /cgi-bin/cstec...

CVE-2026-51647

The TOTOLINK T6 router running firmware version 4.1.5cu.748_B20211015 is vulnerable to an incorrect access control flaw in the getCrpcCfg function. This vulnerability allows unauthenticated attackers to obtain cloud remote-control status and URL information by sending a crafted POST request to th...

EUVD-2026-67876

Incorrect access control in the getDmzCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DMZ configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83308

bisheng through 2.6.0-fix2 contains a server-side request forgery vulnerability in the POST /api/v1/workflow/report/callback endpoint that lacks authentication and applies no URL scheme restrictions or host filtering. Unauthenticated attackers can supply arbitrary URLs to enumerate internal netwo...

PT-2026-83183

Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain setup wizard and onboarding configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83176

Incorrect access control in the RebootSystem function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to arbitrarily force an immediate reboot via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83213

Incorrect access control in the getWanInfo function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain WAN information returned by the endpoint via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83202

Incorrect access control in the getMeshPortalTable function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain mesh portal table information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83204

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the getApWiFiSchCfg function allows unauthenticated attackers to obtain AP-specific Wi-Fi scheduling rules. This is achieved by sending a crafted POST request to...

PT-2026-83208

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the getNtpCfg function allows unauthenticated attackers to obtain NTP configuration and current time data. This is achieved by sending a crafted POST request to...

PT-2026-83186

Incorrect access control in the getInitCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain sensitive device configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83340

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the getWiFiApcliScan function allows unauthenticated attackers to trigger wireless scans and retrieve AP-client scan results. This is achieved by sending a craft...

CVE-2026-51641

Incorrect access control in the getWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh configuration and runtime state information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51624

Incorrect access control in the getStationMacByIp function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain a client MAC address via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51619

Incorrect access control in the getOnlineClient function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain online client information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51663

Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger wireless scans and retrieve AP-client scan results via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51639

Incorrect access control in the getApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain AP-specific Wi-Fi scheduling rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51637

Incorrect access control in the getMeshPortalTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh portal table information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...