CVE-2026-82603

A path traversal vulnerability in SeaCMS up to 13.6 affects the Comment Cache component via the /member.php?action=del_pl endpoint. Manipulation of the itype/vid argument allows a remote, low-privileged attacker to traverse paths, resulting in low integrity and availability impact (consistent wit...

CVE-2026-82602

This vulnerability affects SeaCMS up to version 13.6 , specifically in the file /ass.php . A remotely exploitable authorization bypass allows unauthenticated attackers to manipulate the file and gain partial access to confidential data. No integrity or availability impact is reported. The exploit...

CVE-2026-82601

SeaCMS versions up to 13.6 are affected by a reflected cross-site scripting (XSS) vulnerability in the /err.php file. By manipulating the errtxt parameter, a remote attacker can inject malicious script that executes in the victim's browser upon interaction. The attack requires user interaction bu...

CVE-2026-75760

ash_ai (ash-project, Elixir) contains a sensitive information disclosure in AshAi.Changes.Vectorize . When the embedding provider call fails, the raw error term is inspected into a user-facing changeset error, potentially exposing the request URL , provider response body , and the outbound Author...

CVE-2026-82580

CVE-2026-82580 affects ash_ai (versions 0.6.0 through

CVE-2026-82579

CVE-2026-82579 is an infinite loop vulnerability in the ash_ai Elixir/Erlang library (versions 0.6.0 through before 1.0.0 ), affecting the AshAi.ToolLoop component. When all tool calls are filtered out—either due to a missing valid name or a reused tool_call_id—the loop recurses with a byte-ident...

CVE-2026-82564

CVE-2026-82564 is an Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai (versions 0.6.0 to <1.0.0). In AshAi.Tool.Execution, the identity_filter/3 function built update/destroy filters directly from raw tool arguments. Because a map value is parsed as a predic...

CVE-2026-82600

SeaCMS up to version 13.6 is affected by a SQL injection vulnerability in the file /zyapi.php?ac=videolist, specifically through manipulation of the ids argument. The flaw allows remote, unauthenticated attackers to execute arbitrary SQL queries with low complexity . The impact is rated HIGH (7.3...

CVE-2026-81315

CVE-2026-81315 is an origin validation error in ash-project ash_ai (affecting AshAi.Mcp.Server), allowing a malicious web page to bypass the MCP server's DNS-rebinding protection and issue cross-site requests to a user's local MCP server using that user's actor. The root cause lies in origin_allo...

CVE-2026-77956

CVE-2026-77956 is a code injection vulnerability in ash_ai (ash-project, Elixir), affecting versions 0.1.0 through before 1.0.0 . The root cause lies in AshAi.Actions.Prompt, which evaluates prompt content via EEx.eval_string/2. When a prompt uses the documented function form and incorporates req...

CVE-2026-82599

SeaCMS versions up to 13.6 are affected by a path traversal vulnerability in the Avatar Upload component. The flaw resides in the unlink function of /member.php?action=chgpwdsubmit, where manipulation of the oldpic argument allows a remote attacker with low privileges to delete arbitrary files. T...

CVE-2026-82598

SeaCMS versions up to 13.6 contain a code injection vulnerability in the Template Engine component, specifically in the parseIf function within search.php . An attacker can remotely manipulate the searchtype argument without authentication to inject arbitrary code. The CVSS 3.1 score is 7.3 (HIGH...

CVE-2026-82597

A command injection vulnerability exists in TOTOLINK NR1800X (version 9.1.0u.6681_B20230703), specifically in the setUssd function of /cgi-bin/cstecgi.cgi . Manipulating the ussd argument allows a remote attacker with low privileges to inject arbitrary commands. The attack requires no user intera...

CVE-2026-82596

LatencyUtils (versions up to 2.0.3) contains a memory corruption vulnerability in the PauseDetector component, specifically in the function LatencyStats.recordDetectedPause within src/main/java/org/LatencyUtils/LatencyStats.java. The flaw requires a local attack and results in partial/low availab...

CVE-2026-51152

CVE-2026-51152 is a critical SSRF (CVSS 9.1) in QD (a HAR file processing tool by QD-Today), affecting versions 20220208 through 20250803 . The root cause is in Fetcher.build_request() in libs/fetcher.py, which constructs an httpclient.HTTPRequest from user-supplied JSON without validating URL sc...

CVE-2026-51672

CVE-2026-51672 is an incorrect access control flaw in the getRoamingCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). An unauthenticated remote attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain the roaming enablement flag, resulting in information ...

CVE-2026-51688

CVE-2026-51688 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . The root cause is an incorrect access control in the setWiFiSignalCfg function, which is exposed via the endpoint /cgi-bin/cstecgi.cgi. An unauthenticated attacker on the network can send a crafted POST request...

CVE-2026-51690

An incorrect access control vulnerability in the setWanCfg function of TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) allows an unauthenticated remote attacker to alter upstream provisioning and connectivity by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CVSS 3.1 score is 9.1 (CRITI...

CVE-2026-51713

CVE-2026-51713 affects the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). An incorrect access control flaw in the setManualDialCfg function allows unauthenticated attackers to manipulate the WAN dial state by sending a crafted POST request to /cgi-bin/cstecgi.cgi . The CVSS 3.1 score is 9....

CVE-2026-51678

CVE-2026-51678 affects the TOTOLINK T6 router, version 4.1.5cu.748_B20211015 . An incorrect access control flaw in the setSyslogCfg function allows an unauthenticated attacker on the adjacent network to alter the device's logging behavior by sending a crafted POST request to /cgi-bin/cstecgi.cgi....

CVE-2026-51717

TOTOLINK T6 firmware 4.1.5cu.748_B20211015 contains an incorrect access control flaw in the setOpModeCfg function, allowing unauthenticated attackers to change the device's operating mode by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CVSS 3.1 score is 9.1 (Critical) with high con...

CVE-2026-51729

CVE-2026-51729 affects the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). The root cause is an incorrect access control in the delDevice function, reachable via a crafted POST request to /cgi-bin/cstecgi.cgi , which allows an unauthenticated attacker to request deletion of a managed slave ...

CVE-2026-51695

An incorrect access control flaw in the setDdnsCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows an unauthenticated attacker to alter the device's dynamic DNS configuration by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The flaw scores CVSS 3.1: 7.5 (High...

CVE-2026-51726

CVE-2026-51726 is an incorrect access control vulnerability in the delParentalRules function of TOTOLINK T6 firmware 4.1.5cu.748_B20211015 . Unauthenticated remote attackers can send a crafted POST request to /cgi-bin/cstecgi.cgi to remove parental-control rules. The CVSS 3.1 score is 9.1 (CRITIC...

CVE-2026-51736

TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 contains an incorrect access control flaw in the clearSyslog function, reachable via a crafted POST request to /cgi-bin/cstecgi.cgi. Because no authentication is required, a network-based attacker can erase system logs , destroying evidence of pr...

CVE-2026-51712

CVE-2026-51712 is an incorrect access control vulnerability in the setApWiFiSchCfg function of the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An unauthenticated attacker on the network can send a crafted POST request to /cgi-bin/cstecgi.cgi to alter the device's wireless availabi...

CVE-2026-51670

TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) contains an incorrect access control flaw in the getSlaveUpdate function. An unauthenticated remote attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to query slave upgrade status and affect upgrade bookkeeping. CISA SSVC rates t...

CVE-2026-75458

CVE-2026-75458 is a vertical privilege escalation in the XueZhiSi Open Source Exam System (versions ≤ 3.9.0). The teacher-end endpoint POST /api/teacher/user/delete/{id} deletes the target user after calling getUserById(id), setDeleted(true), and updateByIdFilter() without verifying whether the r...

CVE-2026-51706

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 are affected by an incorrect access control flaw in the setSmartQosCfg function. An unauthenticated attacker on an adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to degrade traffic handling , resulting in a low a...

CVE-2026-51733

An incorrect access control flaw in the FirmwareUpgrade function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) allows an unauthenticated remote attacker to remove Wi-Fi schedule entries by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The vulnerability is rated CVSS 9.8 (CR...

CVE-2026-51696

CVE-2026-51696 affects the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ), where an incorrect access control flaw in the setPortForwardRules function allows an unauthenticated attacker to expose internal services by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The vulnerability i...

CVE-2026-51740

TOTOLINK T6 firmware 4.1.5cu.748_B20211015 is affected by an incorrect access control flaw in the killProcess function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to terminate critical services on the device. The vulnerability is scored CVSS 9.8 (Critical)...

CVE-2026-38577

Tenda HG21 router (version V4.0.0-260302 ) contains insecure hardcoded credentials in its Admin account, allowing a remote, unauthenticated attacker to gain root access to the device. The CVSS 3.1 score is 9.8 (Critical) with a network attack vector and no required privileges. CISA's SSVC assessm...

CVE-2026-51679

TOTOLINK T6 router firmware 4.1.5cu.748_B20211015 is affected by an incorrect access control flaw in the setPasswordCfg function. An unauthenticated remote attacker can change the administrator account password by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The vulnerability is rated ...

CVE-2026-51716

CVE-2026-51716 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An incorrect access control in the delPortForwardRules function allows an unauthenticated attacker to delete port-forwarding rules by sending a crafted POST request to /cgi-bin/cstecgi.cgi . The primary impact ...

CVE-2026-51698

An incorrect access control vulnerability in the setUrlFilterRules function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows an unauthenticated, remote attacker to alter URL browsing policies by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The flaw is rated CVSS 9.1 (...

CVE-2026-51734

An incorrect access control vulnerability in the informSlaveUpdate function of the TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) allows an unauthenticated network attacker to trigger mesh slave update coordination by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CNA-assigned CVSS 3.1...

CVE-2025-63607

TechStore 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the contact_display function, where the id parameter is echoed verbatim into the rendered page, allowing execution of attacker-supplied JavaScript in a victim's browser. The CVSS 3.1 score is 6.1 (Medium) , with a changed scope ...

CVE-2026-51702

An incorrect access control vulnerability in the setIpPortFilterRules function of TOTOLINK T6 firmware 4.1.5cu.748_B20211015 allows an unauthenticated attacker within the adjacent network to alter firewall policies by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CVSS 3.1 score is 4...

CVE-2026-51680

An incorrect access control vulnerability in the setLedCfg function of the TOTOLINK T6 router (version 4.1.5cu.748_B20211015 ) allows unauthenticated attackers to modify LED behavior by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CNA-assigned CVSS 3.1 score is 9.1 (Critical) with ...

CVE-2026-51697

An incorrect access control flaw in the setIptvCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) allows an unauthenticated attacker to alter IPTV service configuration by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CVSS 3.1 score is 9.1 (CRITICAL) , reflectin...

CVE-2026-51732

An incorrect access control flaw in the delWiFiScheduleCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ) allows unauthenticated attackers to remove Wi-Fi schedule entries by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CVSS 3.1 score is 5.3 (Medium) with a ne...

CVE-2026-51676

TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 is affected by an incorrect access control flaw in the setAccessDeviceCfg function. An unauthenticated network attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to alter access-device policies , with potential high impact on both c...

CVE-2026-51703

An incorrect access control flaw in the setWiFiScheduleCfg function of TOTOLINK T6 (firmware 4.1.5cu.748_B20211015 ) allows unauthenticated attackers on the adjacent network to alter Wi-Fi availability schedules by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The vulnerability carries ...

CVE-2026-51715

CVE-2026-51715 is an incorrect access control flaw in the delMacFilterRules function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015). An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to remove MAC filter rules, effectively weakening network-level acce...

CVE-2026-51714

TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) is affected by an incorrect access control flaw in the setRoamingCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to alter the device's roaming behavior. The CVSS 3.1 score is 5.9 (MEDIUM) , with high co...

CVE-2026-79483

FastGPT Community Edition (versions 4.10.0 through 4.14.0) is affected by a NoSQL injection in the POST /api/core/chat/getHistories endpoint. An unauthenticated attacker can inject malicious NoSQL operators via crafted JSON payloads to bypass authorization checks, gaining unauthorized access to c...

CVE-2026-79408

CVE-2026-79408 is an OS command injection vulnerability in MetaGPT 0.8.1 , where the path argument of RepoParser.rebuild_class_views() in metagpt/repo_parser.py can be abused to execute arbitrary commands. The CVSS 3.1 score is 9.8 (CRITICAL) with a network attack vector, low complexity, and no p...

CVE-2026-51730

CVE-2026-51730 is an incorrect access control vulnerability in the delWiFiAclRules function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to remove Wi-Fi ACL rules , potentially allowing unauthorize...

CVE-2026-51668

CVE-2026-51668 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An incorrect access control flaw in the setLanguageCfg function allows an unauthenticated attacker to modify the device's language configuration by sending a crafted POST request to /cgi-bin/cstecgi.cgi . The C...