https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T20:54:28.564326+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2026-36100 cnvd-2026-36100 2026-10-29T20:54:28.588667+00:00 cnvd-2026-36100 https://db.gcve.eu/vuln/fkie_cve-2026-51644 fkie_cve-2026-51644 2026-10-29T20:54:28.588714+00:00

Incorrect access control in the getCrpcConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain cloud remote-control status and URL information via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

 https://db.gcve.eu/vuln/ghsa-f3xj-g53c-x6j9 GHSA-f3xj-g53c-x6j9 2026-10-29T20:54:28.588749+00:00

Incorrect access control in the getCrpcConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain cloud remote-control status and URL information via sending a crafted POST request to /cgi-bin/cstecgi.cgi.