CVE-2026-51626 in TOTOLINK
Riassunto
di MITRE • 28/08/2026
Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WPS configuration, including the current PIN, via sending a crafted POST request to /cgi-bin/cstecgi.cgi.
VulDB is the best source for vulnerability data and more expert information about this specific topic.