Vulnerabilities
Summary — last 7 days
New vulnerabilities3,008▲ 385 vs. last week
Critical / high1,453▲ 24 vs. last week
New active exploitation (KEV)6▼ 1 vs. last week
Unscored (no CVSS)237▲ 223 vs. last week
1,440 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.5) | 0.60% | — | Totolink T6AI | 9/1/2026 | 9/1/2026 | Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reboot the local device and, on a master, fan out reboot commands to mesh slaves via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 9/1/2026 | 9/2/2026 | Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to insert or replace mesh neighbor records via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 9/1/2026 | 9/3/2026 | Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to overwrite cloud-result tracking files via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 9/1/2026 | 9/3/2026 | Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forcibly disconnect wireless clients via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 9/1/2026 | 9/3/2026 | Incorrect access control in the meshInfoKick function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to kick or clean stale mesh information/state and trigger regeneration of mesh metadata via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Medium (5.3) | 0.40% | — | Totolink T6AI | 9/1/2026 | 9/1/2026 | Incorrect access control in the updateLanIp function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to refresh the LAN address state via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 9/1/2026 | 9/3/2026 | Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to mass-trigger firmware update activity across mesh slaves via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 9/1/2026 | 9/3/2026 | Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start a firmware download or flash workflow on the slave device via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Medium (5.9) | 0.43% | — | Totolink T6AI | 9/1/2026 | 9/1/2026 | Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.8) | 0.62% | — | Totolink T6AI | 9/1/2026 | 9/3/2026 | Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to overwrite the slave IP inventory state via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Medium (5.3) | 0.41% | — | Totolink T6AI | 9/1/2026 | 9/1/2026 | Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger static information reporting to the configured master via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 9/1/2026 | 9/3/2026 | Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove a specified slave device from local mesh management data and reboot the system via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 9/1/2026 | 9/3/2026 | Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rescan and switch the primary mesh channel via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Medium (5.9) | 0.43% | — | Totolink T6AI | 9/1/2026 | 9/1/2026 | Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to update stored slave inventory records via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 9/1/2026 | 9/3/2026 | Incorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to emit indirect mesh heartbeat information toward the master via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Medium (5.3) | 0.40% | — | Totolink T6AI | 9/1/2026 | 9/1/2026 | Incorrect access control in the updatePriStaList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to refresh the primary station list via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 9/1/2026 | 9/3/2026 | Incorrect access control in the recv_mesh_info_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to force mesh configuration synchronization from an attacker-controlled host via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Critical (9.1) | 0.51% | — | Totolink T6AI | 9/1/2026 | 9/1/2026 | Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to disable guest virtual AP interfaces via sending a crafted MQTT message to the cs_broker component. | |
| Deferred | Medium (5.9) | 0.43% | — | Totolink T6AI | 9/1/2026 | 9/1/2026 | Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted POST request to /cgi-bin/cstecgi.cgi. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 9/1/2026 | 9/3/2026 | Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase diagnosis logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 8/31/2026 | 9/1/2026 | Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi. | |
| Deferred | Medium (5.9) | 0.43% | — | Totolink T6AI | 8/31/2026 | 9/1/2026 | Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger cloud update checks via sending a crafted POST request to /cgi-bin/cstecgi.cgi. | |
| Deferred | Critical (9.8) | 0.64% | — | Totolink T6AI | 8/31/2026 | 9/2/2026 | Incorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset the device configuration and reboot the device via sending a crafted POST request to /cgi-bin/cstecgi.cgi. | |
| Deferred | Medium (5.3) | 0.40% | — | Totolink T6AI | 8/31/2026 | 9/1/2026 | Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase traceroute logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi. | |
| Deferred | Critical (9.1) | 0.51% | — | Totolink T6AI | 8/31/2026 | 9/1/2026 | Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase system logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi. |