CVE-2026-51677 | TOTOLINK T6 4.1.5cu.748_B20211015 UPnP Service /cgi-bin/cstecgi.cgi setUPnPCfg access control (EUVD-2026-68540)

A vulnerability identified as critical has been detected in TOTOLINK T6 4.1.5cu.748_B20211015. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the component UPnP Service. Performing a manipulation results in improper access controls.

This vulnerability is cataloged as CVE-2026-51677. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More