CVE-2026-51728 | TOTOLINK T6 4.1.5cu.748 Firmware Upload /cgi-bin/cstecgi.cgi UploadFirmwareFile access control

August 31, 2026 Yanac

A vulnerability was found in TOTOLINK T6 4.1.5cu.748 and classified as very critical. This affects the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi of the component Firmware Upload. Such manipulation leads to improper access controls.

This vulnerability is traded as CVE-2026-51728. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More