TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38559)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. There is an access control vulnerability in TOTOLINK T6. This vulnerability stems from improper access control in the setUpgradeFW function. Attackers can exploit this vulnerability by sending a specially crafted POST request t...