PT-2026-83340

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the getWiFiApcliScan function allows unauthenticated attackers to trigger wireless scans and retrieve AP-client scan results. This is achieved by sending a craft...

CVE-2026-51632

The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is vulnerable to an incorrect access control flaw in the getWiFiAdvancedCfg function. This vulnerability allows unauthenticated attackers to obtain advanced wireless settings by sending a crafted POST request to /cgi-bin/cst...

CVE-2026-51663

The TOTOLINK T6 (firmware version 4.1.5cu.748_B20211015 ) is vulnerable to an incorrect access control flaw within the getWiFiApcliScan function. An unauthenticated attacker can trigger wireless scans and retrieve AP-client scan results by sending a crafted POST request to the /cgi-bin/cstecgi.cg...

CVE-2026-51634: Improper Access Control

Incorrect access control in the getWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain core wireless settings, including SSIDs and Wi-Fi keys, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67890

Incorrect access control in the getWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain core wireless settings, including SSIDs and Wi-Fi keys, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51663

Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger wireless scans and retrieve AP-client scan results via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51632

Incorrect access control in the getWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain advanced wireless settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83199

Incorrect access control in the getWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain core wireless settings, including SSIDs and Wi-Fi keys, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51663: Improper Access Control

Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger wireless scans and retrieve AP-client scan results via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

ROS-20260827-73-0040

The vulnerability in the net/wireless/mlme.c module of Linux operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260827-73-0021

The vulnerability of the nl80211parsembssidelems function in the net/wireless/nl80211.c module of the Linux operating system’s wireless communication support is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260827-73-0028

The vulnerability of the iwlmvmupdatemcc function in the drivers/net/wireless/intel/iwlwifi/mvm/nvm.c file of the Intel wireless driver module is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20260826-73-0008

The vulnerability of the ath6klhtcpiperxcomplete function in the drivers/net/wireless/ath/ath6kl/htcpipe.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow...

Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath12kmacopflush function in the drivers/net/wireless/ath/ath12k/mac.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker...

Texas Instruments wireless adapter driver Heap Buffer Overflow DoS

The vulnerability of the wl1271opresume function in the drivers/net/wireless/ti/wlcore/main.c file of the Texas Instruments wireless adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker ...

Atheros Qualcomm Wireless Driver Buffer Overflow

The vulnerability of the ar5523cmd function in the drivers/net/wireless/ath/ar5523/ar5523.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

Marvell Linux Kernel Function Heap Buffer Overflow DoS

The vulnerability of the lbsfreeadapter function in the drivers/net/wireless/marvell/libertas/main.c module of the Marvell Linux kernel operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, an...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ath11k: pci: fix crash on suspend if board file is not found Mario reported that the kernel crashed during suspension if ath11k failed to locate the board file: 473.693286 PM: Suspending system s2idle 473.693291 printk:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mac80211: The issue in ieee80211scanrx involves checking the skb length. This code requires hard-coded compile-time constants for determining the header length check. Instead, a dynamic determination based on the frame type shoul...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: nl80211: Fixed an integer overflow in nl80211ParseMBSSIDElems. The nl80211ParseMBSSIDElems function uses a u8 variable numElems to count the number of MBSSID elements in the nested netlink attribute attrs. This can lead to ...