EUVD-2026-67920

Incorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain parental-control rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51647

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 are affected by an incorrect access control flaw in the getCrpcCfg function, reachable via a crafted POST request to /cgi-bin/cstecgi.cgi . The vulnerability requires no authentication , allowing an attacker to obtain cloud remote-control...

CVE-2026-51652

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 contain an incorrect access control vulnerability in the getUPnPCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to disclose the device's UPnP enablement status and parsed port-mapping info...

CVE-2026-51658

CVE-2026-51658 is an incorrect access control vulnerability in the getDmzCfg function of TOTOLINK T6 (firmware 4.1.5cu.748_B20211015). Unauthenticated attackers can obtain DMZ configuration information by sending a crafted POST request to /cgi-bin/cstecgi.cgi. No patch version or workaround is me...

CVE-2026-51645

CVE-2026-51645 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An incorrect access control flaw in the getPasswordCfg function allows an unauthenticated attacker to obtain the administrative username by sending a crafted POST request to /cgi-bin/cstecgi.cgi. This informati...

CVE-2026-51663

CVE-2026-51663 is an incorrect access control vulnerability in the getWiFiApcliScan function of the TOTOLINK T6 router, firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker can trigger a wireless scan and retrieve AP-client scan results by sending a crafted POST request to /cgi-bi...

CVE-2026-51610

TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 contains an incorrect access control flaw in the RebootSystem function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to force an immediate reboot of the device. The primary impact is denial of service throug...

CVE-2026-51611

CVE-2026-51611 affects the TOTOLINK T6 router, specifically version 4.1.5cu.748_B20211015 . The vulnerability is an incorrect access control flaw in the startSlaveReboot function. An unauthenticated attacker can exploit this by sending a crafted MQTT message , resulting in an arbitrary forced reb...

CVE-2026-51637

Incorrect access control in the getMeshPortalTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh portal table information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51652

Incorrect access control in the getUPnPCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain UPnP enablement and parsed port-mapping information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51645

Incorrect access control in the getPasswordCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain the administrative username via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51640

Incorrect access control in the getMeshNeighborTable function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain mesh neighbor information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51655

Incorrect access control in the getMacFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain MAC filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51657

Incorrect access control in the getSyslogCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain syslog-related configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51634

Incorrect access control in the getWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain core wireless settings, including SSIDs and Wi-Fi keys, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51632

Incorrect access control in the getWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain advanced wireless settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51651

Incorrect access control in the getSmartQosCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain Smart QoS configuration and rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51658

Incorrect access control in the getDmzCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DMZ configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51653

Incorrect access control in the getStorageCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain storage feature state information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51617

Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive information such as operation mode, firmware version, serial number, WAN/LAN IP addresses, WiFi SSID, encryption keys, and connected client statistics...