CVE-2026-51743

An incorrect access control vulnerability in the guest_wifi_sync function of TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) allows unauthenticated attackers to disable guest virtual AP interfaces by sending a crafted MQTT message to the cs_broker component. The root cause is insufficient access con...