CVE-2026-51610

TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 contains an incorrect access control flaw in the RebootSystem function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to force an immediate reboot of the device. The primary impact is denial of service throug...

CVE-2026-51611

CVE-2026-51611 affects the TOTOLINK T6 router, specifically version 4.1.5cu.748_B20211015 . The vulnerability is an incorrect access control flaw in the startSlaveReboot function. An unauthenticated attacker can exploit this by sending a crafted MQTT message , resulting in an arbitrary forced reb...

CVE-2026-51614

TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) is affected by an incorrect access control flaw in the getAccessDeviceCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain access-device policy and client state information , resulting in sensitive...

CVE-2026-51620

CVE-2026-51620 is an incorrect access control vulnerability in the getNetInfoCfg function of the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve network topology and interface configuration...

CVE-2026-51624

CVE-2026-51624 is an incorrect access control vulnerability in the getStationMacByIp function of the TOTOLINK T6 wireless router, firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker can obtain a client MAC address by sending a crafted POST request to /cgi-bin/cstecgi.cgi, enablin...

CVE-2026-51625

CVE-2026-51625 is an incorrect access control vulnerability in the getWiFiEasyCfg function of the TOTOLINK T6 router, firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain sensitive Wi-Fi information, including SSIDs...

CVE-2026-51632

CVE-2026-51632 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . The vulnerability is an incorrect access control flaw in the getWiFiAdvancedCfg function, which allows unauthenticated attackers to retrieve advanced wireless settings by sending a crafted POST request to /cgi-...

CVE-2026-51640

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 contain an incorrect access control flaw in the getMeshNeighborTable function. An unauthenticated attacker can exploit this by sending a crafted POST request to /cgi-bin/cstecgi.cgi, gaining access to mesh neighbor information . No specif...

CVE-2026-51645

CVE-2026-51645 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An incorrect access control flaw in the getPasswordCfg function allows an unauthenticated attacker to obtain the administrative username by sending a crafted POST request to /cgi-bin/cstecgi.cgi. This informati...

CVE-2026-51647

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 are affected by an incorrect access control flaw in the getCrpcCfg function, reachable via a crafted POST request to /cgi-bin/cstecgi.cgi . The vulnerability requires no authentication , allowing an attacker to obtain cloud remote-control...

CVE-2026-51650

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 are affected by an incorrect access control flaw in the getRemoteCfg function, reachable via a crafted POST request to /cgi-bin/cstecgi.cgi . The vulnerability allows unauthenticated attackers to retrieve the remote-management enablement ...

CVE-2026-51653

CVE-2026-51653 is an incorrect access control flaw in the getStorageCfg function of the TOTOLINK T6 router, affecting firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain storage feature state information , represen...

CVE-2026-51655

CVE-2026-51655 affects the TOTOLINK T6 router running firmware version 4.1.5cu.748_B20211015 . An incorrect access control flaw in the getMacFilterRules function allows unauthenticated attackers to obtain MAC filter rules by sending a crafted POST request to /cgi-bin/cstecgi.cgi. This exposes net...

CVE-2026-51656

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 are affected by an incorrect access control flaw in the getVpnPassCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve VPN pass-through and WAN ping filter settings, exposing networ...

CVE-2026-51657

CVE-2026-51657 is an incorrect access control flaw in the getSyslogCfg function of the TOTOLINK T6 router, firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain syslog-related configuration from the device. The prima...

CVE-2026-51617

TOTOLINK T6 firmware 4.1.5cu.748_B20211015 contains an incorrect access control flaw in the getSysStatusCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve sensitive data including operation mode, firmware version, serial number, WAN/LAN I...

CVE-2026-51649

CVE-2026-51649 affects the TOTOLINK T6 router in firmware version 4.1.5cu.748_B20211015 . The vulnerability is an incorrect access control in the getDiagnosisCfg function, which allows unauthenticated attackers to send a crafted POST request to /cgi-bin/cstecgi.cgi and retrieve diagnostic configu...

CVE-2026-51652

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 contain an incorrect access control vulnerability in the getUPnPCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to disclose the device's UPnP enablement status and parsed port-mapping info...

CVE-2026-51658

CVE-2026-51658 is an incorrect access control vulnerability in the getDmzCfg function of TOTOLINK T6 (firmware 4.1.5cu.748_B20211015). Unauthenticated attackers can obtain DMZ configuration information by sending a crafted POST request to /cgi-bin/cstecgi.cgi. No patch version or workaround is me...

CVE-2026-51651

CVE-2026-51651 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . The vulnerability stems from incorrect access control in the getSmartQosCfg function, accessible via the endpoint /cgi-bin/cstecgi.cgi. An unauthenticated attacker can send a crafted POST request to retrieve Sm...