EUVD-2026-68582
GHSA-2qw7-8xj4-xq6q
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Unauthenticated network-reachable CGI (AV:N/AC:L/PR:N/UI:N); the function writes guest-WiFi config, so integrity is high while it reads no data (C:N) and does not disrupt service (A:N).
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
Incorrect access control in the setWiFiEasyGuestCf function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to create or weaken guest wireless access via sending a crafted POST request to /cgi-bin/cstecgi.cgi.
AnalysisAI
Unauthenticated access-control bypass in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote attackers invoke the setWiFiEasyGuestCf handler on /cgi-bin/cstecgi.cgi with no credentials, creating or weakening the guest wireless network configuration. An attacker can enable or reconfigure guest WiFi to broaden its reach or lower its security, providing an unauthorized foothold onto the local network. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the ability to reach the router's web backend at /cgi-bin/cstecgi.cgi and issue a POST invoking the setWiFiEasyGuestCf function; per CVSS PR:N/UI:N no authentication or user interaction is needed. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are mixed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No fixed firmware version is identified in the provided data, so no vendor-released patch is confirmed at time of analysis - check the TOTOLINK download portal (https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/190/ids/36.html) for a build newer than 4.1.5cu.748_B20211015 and apply it once available. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: execute an inventory sweep across your network infrastructure to identify all TOTOLINK T6 devices and confirm firmware versions, then disable guest WiFi functionality on all identified units immediately if not actively in use. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today