https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T19:31:37.570439+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2026-38416 cnvd-2026-38416 2026-10-05T19:31:37.577168+00:00 cnvd-2026-38416 https://vulnerability.circl.lu/vuln/fkie_cve-2026-51669 fkie_cve-2026-51669 2026-10-05T19:31:37.577269+00:00

Incorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain pairing and mesh-slave configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

 https://vulnerability.circl.lu/vuln/ghsa-97gj-9c62-rm99 GHSA-97gj-9c62-rm99 2026-10-05T19:31:37.577345+00:00

Incorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain pairing and mesh-slave configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi.