CVE-2026-51760 in TOTOLINKinformazioni

Riassunto

di MITRE • 01/09/2026

Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to mass-trigger firmware update activity across mesh slaves via sending a crafted MQTT message to the cs_broker component.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsabile

MITRE

Prenotare

08/06/2026

Divulgazione

01/09/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

Do you need the next level of professionalism?

Upgrade your account now!