Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

TOTOLINK T6 router allows outsiders to reduce network filtering

CVE-2026-51693 · published 2 months ago
Summary

The T6 router firmware version 4.1.5cu.748 has a flaw that lets anyone on the internet send a special web request and weaken the router's edge‑filtering protection. This can make the network more exposed to unwanted traffic or attacks. Update the router to the latest firmware and ensure remote management is disabled or secured with strong passwords.

Original advisory text
Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to weaken edge filtering via sending a crafted POST request to /cgi-bin/...
Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to weaken edge filtering via sending a crafted POST request to /cgi-bin/cstecgi.cgi.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-284Improper Access Control
Timeline
Published31 Aug 2026
Updated4 Nov 2026
First seen31 Aug 2026
Sources
CVE-2026-51693 · NVD
CVE-2026-51693 · MITRE
Track software like this
Free during beta