CVE-2026-51743
Received Received - Intake

Incorrect Access Control in TOTOLINK T6 Router via MQTT Message

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: MITRE

Description
Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to disable guest virtual AP interfaces via sending a crafted MQTT message to the cs_broker component.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-01
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-51743
EUVD
EUVD-2026-69210

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
totolink t6 4.1.5cu.748_b20211015

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an incorrect access control issue in the guest_wifi_sync function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015. It allows unauthenticated attackers to disable guest virtual AP interfaces by sending a specially crafted MQTT message to the cs_broker component.

Impact Analysis

If exploited, this vulnerability could allow attackers to disable guest Wi-Fi networks, potentially disrupting network services for guests. It may also serve as a stepping stone for further attacks on the network.

Compliance Impact

This vulnerability allows unauthenticated attackers to disable guest Wi-Fi interfaces, potentially disrupting network segmentation. This could impact compliance with standards like GDPR or HIPAA by failing to maintain required network isolation for sensitive data.

Mitigation Strategies

Disable guest virtual AP interfaces if not in use. Monitor MQTT traffic to cs_broker component for suspicious messages. Update TOTOLINK T6 firmware if a patch becomes available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-51743. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart