CVE-2026-51723 | TOTOLINK T6 4.1.5cu.748 Custom Module Upload /cgi-bin/cstecgi.cgi UploadCustomModule access control

August 31, 2026 Yanac

A vulnerability classified as very critical has been found in TOTOLINK T6 4.1.5cu.748. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component Custom Module Upload. Performing a manipulation results in improper access controls.

This vulnerability is cataloged as CVE-2026-51723. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More