CVE-2026-51745

The TOTOLINK T6 running firmware version 4.1.5cu.748_B20211015 is vulnerable to incorrect access control in the updatePriStaList function. This flaw allows unauthenticated attackers to refresh the primary station list by sending a crafted MQTT message to the cs_broker component. No specific remed...