What is the CVSS score of CVE-2026-51650?

CVE-2026-51650 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Which versions of TOTOLINK T6 are affected by CVE-2026-51650?

TOTOLINK T6 routers are vulnerable to an unauthenticated configuration disclosure (CVE-2026-51650) that exposes remote administration settings to reconnaissance scans, enabling attackers to identify…

How to fix or mitigate CVE-2026-51650?

Within 24 hours, conduct a network inventory to identify all TOTOLINK T6 devices running firmware version 4.1.5cu.748_B20211015 and document which have internet-facing or remote access capability. Within 7 days, implement firewall rules restricting access to management interfaces to whitelisted trusted administrative IP addresses, disable remote administration if operationally unnecessary, and apply network segmentation to isolate affected routers from untrusted networks. Within 30 days, pursue available firmware upgrades from TOTOLINK or plan replacement of affected devices on critical network infrastructure, establish comprehensive access logging on management interfaces, and configure alerting for suspicious access patterns targeting management ports.

TOTOLINK T6 CVE-2026-51650

EUVD-2026-67884 HIGH

Improper Access Control (CWE-284)

2026-08-28 mitre

GHSA-xxhg-95vx-gc5m

Authentication Bypass

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

5.3 MEDIUM

Unauthenticated network access confirmed, but disclosed data (port number, enablement flag) warrants C:L not C:H; no integrity or availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Metadata Corrected

Sep 01, 2026 - 17:40 vuln.today

tag: N A removed

Analysis Generated

Sep 01, 2026 - 17:32 vuln.today

CVSS changed

Sep 01, 2026 - 17:22 NVD

7.5 (None) 7.5 (HIGH)

CVE Published

Aug 28, 2026 - 00:00 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 28, 2026 - 00:00 cve.org

HIGH 7.5

DescriptionCVE.org

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain remote-management enablement and port information via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

AnalysisAI

Unauthenticated remote-management configuration disclosure in TOTOLINK T6 firmware 4.1.5cu.748_B20211015 exposes whether remote administration is enabled and on which port, via a crafted POST to /cgi-bin/cstecgi.cgi invoking the getRemoteCfg function. The root cause is CWE-284 incorrect access control - no authentication check gates the function before returning configuration data. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	No special conditions are required beyond network reachability of the router's web management interface - the CVSS vector AV:N/AC:L/PR:N/UI:N confirms unauthenticated remote exploitation against the default-enabled HTTP interface on TOTOLINK T6 firmware 4.1.5cu.748_B20211015. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	CVSS 7.5 (C:H) reflects unauthenticated network access with no complexity, but the actual confidentiality impact is moderate at best - the function discloses only remote-management enablement status and the listening port, not credentials or session material, which makes C:H a likely overstatement for this specific endpoint. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	No vendor-released patch version has been identified in the available data at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, conduct a network inventory to identify all TOTOLINK T6 devices running firmware version 4.1.5cu.748_B20211015 and document which have internet-facing or remote access capability. …

Threat intelligence, references, and detailed analysis are available after sign-in.