# Vulnerabilities published in 2026


- [CVE-2026-51684](https://insights.sbomify.com/CVE-2026-51684/): Incorrect access control in the setStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter the st (critical 9.8)
- [CVE-2026-51683](https://insights.sbomify.com/CVE-2026-51683/): Incorrect access control in the setLanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter LAN networ (medium 4.3)
- [CVE-2026-51681](https://insights.sbomify.com/CVE-2026-51681/): Incorrect access control in the setRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to expose WAN-si (critical 9.1)
- [CVE-2026-51680](https://insights.sbomify.com/CVE-2026-51680/): Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify LED behav (critical 9.1)
- [CVE-2026-51679](https://insights.sbomify.com/CVE-2026-51679/): Incorrect access control in the setPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change the (critical 9.1)
- [CVE-2026-51678](https://insights.sbomify.com/CVE-2026-51678/): Incorrect access control in the setSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter logging (medium 4.3)
- [CVE-2026-51677](https://insights.sbomify.com/CVE-2026-51677/): Incorrect access control in the setUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to change UPnP ser (critical 9.1)
- [CVE-2026-51676](https://insights.sbomify.com/CVE-2026-51676/): Incorrect access control in the setAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter a (critical 9.1)
- [CVE-2026-51675](https://insights.sbomify.com/CVE-2026-51675/): Incorrect access control in the setWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure up (critical 9.1)
- [CVE-2026-51674](https://insights.sbomify.com/CVE-2026-51674/): Incorrect access control in the setScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to configure f (critical 9.8)
- [CVE-2026-51673](https://insights.sbomify.com/CVE-2026-51673/): Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter time synch (high 7.5)
- [CVE-2026-51672](https://insights.sbomify.com/CVE-2026-51672/): Incorrect access control in the getRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain the r (critical 9.1)
- [CVE-2026-51671](https://insights.sbomify.com/CVE-2026-51671/): Incorrect access control in the getCloudDownloadStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obt (high 7.5)
- [CVE-2026-51670](https://insights.sbomify.com/CVE-2026-51670/): Incorrect access control in the getSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to query slave (critical 9.8)
- [CVE-2026-5167](https://insights.sbomify.com/CVE-2026-5167/): Masteriyo LMS <= 2.1.7 - Unauthenticated Authorization Bypass to Arbitrary Order Completion via Stripe Webhook Endpoint (medium 5.3)
- [CVE-2026-51669](https://insights.sbomify.com/CVE-2026-51669/): Incorrect access control in the getPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain pairing (critical 9.1)
- [CVE-2026-51668](https://insights.sbomify.com/CVE-2026-51668/): Incorrect access control in the setLanguageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify lang (high 7.5)
- [CVE-2026-51667](https://insights.sbomify.com/CVE-2026-51667/): Incorrect access control in the getWiFiIpMacTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain W (medium 4.3)
- [CVE-2026-51666](https://insights.sbomify.com/CVE-2026-51666/): Incorrect access control in the setWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reconfigure W (medium 4.3)
- [CVE-2026-51665](https://insights.sbomify.com/CVE-2026-51665/): Incorrect access control in the getTracerouteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain tr (medium 4.3)
- [CVE-2026-51664](https://insights.sbomify.com/CVE-2026-51664/): Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Telnet (medium 4.3)
- [CVE-2026-51663](https://insights.sbomify.com/CVE-2026-51663/): Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger w (critical 9.8)
- [CVE-2026-51662](https://insights.sbomify.com/CVE-2026-51662/): Incorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obt (high 7.5)
- [CVE-2026-51661](https://insights.sbomify.com/CVE-2026-51661/): Incorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain (critical 9.1)
- [CVE-2026-51660](https://insights.sbomify.com/CVE-2026-51660/): Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtai (critical 9.1)
- [CVE-2026-5166](https://insights.sbomify.com/CVE-2026-5166/): Path Traversal in TUBITAK BILGEM's Pardus Software Center (critical 9.6)
- [CVE-2026-51659](https://insights.sbomify.com/CVE-2026-51659/): Incorrect access control in the getUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain D (high 7.5)
- [CVE-2026-51658](https://insights.sbomify.com/CVE-2026-51658/): Incorrect access control in the getDmzCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain DMZ confi (high 7.5)
- [CVE-2026-51657](https://insights.sbomify.com/CVE-2026-51657/): Incorrect access control in the getSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain syslog (critical 9.1)
- [CVE-2026-51656](https://insights.sbomify.com/CVE-2026-51656/): Incorrect access control in the getVpnPassCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain VPN p (medium 4.3)
- [CVE-2026-51655](https://insights.sbomify.com/CVE-2026-51655/): Incorrect access control in the getMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain M (medium 4.3)
- [CVE-2026-51654](https://insights.sbomify.com/CVE-2026-51654/): Incorrect access control in the getScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sche (medium 4.3)
- [CVE-2026-51653](https://insights.sbomify.com/CVE-2026-51653/): Incorrect access control in the getStorageCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain stora (medium 4.3)
- [CVE-2026-51652](https://insights.sbomify.com/CVE-2026-51652/): Incorrect access control in the getUPnPCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain UPnP ena (medium 4.3)
- [CVE-2026-51651](https://insights.sbomify.com/CVE-2026-51651/): Incorrect access control in the getSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Smar (medium 4.3)
- [CVE-2026-51650](https://insights.sbomify.com/CVE-2026-51650/): Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain remote (high 7.5)
- [CVE-2026-5165](https://insights.sbomify.com/CVE-2026-5165/): Virtio-win: virtio-win: memory corruption via use-after-free in virtio blk device reset (medium 6.7)
- [CVE-2026-51649](https://insights.sbomify.com/CVE-2026-51649/): Incorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain dia (critical 9.1)
- [CVE-2026-51648](https://insights.sbomify.com/CVE-2026-51648/): Incorrect access control in the getWanInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WAN info (high 7.5)
- [CVE-2026-51647](https://insights.sbomify.com/CVE-2026-51647/): Incorrect access control in the getCrpcCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain cloud re (high 7.5)
- [CVE-2026-51646](https://insights.sbomify.com/CVE-2026-51646/): Incorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain pa (critical 9.1)
- [CVE-2026-51645](https://insights.sbomify.com/CVE-2026-51645/): Incorrect access control in the getPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain the (critical 9.8)
- [CVE-2026-51644](https://insights.sbomify.com/CVE-2026-51644/): Incorrect access control in the getCrpcConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain cloud (high 7.5)
- [CVE-2026-51643](https://insights.sbomify.com/CVE-2026-51643/): Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain NTP confi (critical 9.1)
- [CVE-2026-51642](https://insights.sbomify.com/CVE-2026-51642/): Incorrect access control in the getMeshRoutingTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain (high 7.5)
- [CVE-2026-51641](https://insights.sbomify.com/CVE-2026-51641/): Incorrect access control in the getWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain m (high 7.5)
- [CVE-2026-51640](https://insights.sbomify.com/CVE-2026-51640/): Incorrect access control in the getMeshNeighborTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtai (medium 4.3)
- [CVE-2026-5164](https://insights.sbomify.com/CVE-2026-5164/): Virtio-win: virtio-win: denial of service via unvalidated descriptor count in unmap request (medium 6.7)
- [CVE-2026-51639](https://insights.sbomify.com/CVE-2026-51639/): Incorrect access control in the getApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain AP- (medium 4.3)
- [CVE-2026-51638](https://insights.sbomify.com/CVE-2026-51638/): Incorrect access control in the getWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain gue (medium 4.3)
- [CVE-2026-51637](https://insights.sbomify.com/CVE-2026-51637/): Incorrect access control in the getMeshPortalTable function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain (medium 4.3)
- [CVE-2026-51636](https://insights.sbomify.com/CVE-2026-51636/): Incorrect access control in the getWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Wi- (critical 9.1)
- [CVE-2026-51635](https://insights.sbomify.com/CVE-2026-51635/): Incorrect access control in the getWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain (medium 4.3)
- [CVE-2026-51634](https://insights.sbomify.com/CVE-2026-51634/): Incorrect access control in the getWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain cor (medium 4.3)
- [CVE-2026-51633](https://insights.sbomify.com/CVE-2026-51633/): Incorrect access control in the getWiFiEasyGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain (medium 4.3)
- [CVE-2026-51632](https://insights.sbomify.com/CVE-2026-51632/): Incorrect access control in the getWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain (medium 4.3)
- [CVE-2026-51631](https://insights.sbomify.com/CVE-2026-51631/): Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain (medium 4.3)
- [CVE-2026-51630](https://insights.sbomify.com/CVE-2026-51630/): Incorrect access control in the getDdnsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain DDNS con (medium 4.3)
- [CVE-2026-5163](https://insights.sbomify.com/CVE-2026-5163/): Missing authorization check in AI message rewrite endpoint allows access to private thread content (medium 6.5)
- [CVE-2026-51629](https://insights.sbomify.com/CVE-2026-51629/): Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain (medium 4.3)
- [CVE-2026-51628](https://insights.sbomify.com/CVE-2026-51628/): Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to gene (critical 9.1)
- [CVE-2026-51627](https://insights.sbomify.com/CVE-2026-51627/): Incorrect access control in the getIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain IPTV and (high 7.5)
- [CVE-2026-51626](https://insights.sbomify.com/CVE-2026-51626/): Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WPS c (critical 9.1)
- [CVE-2026-51625](https://insights.sbomify.com/CVE-2026-51625/): Incorrect access control in the getWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sens (high 7.5)
- [CVE-2026-51624](https://insights.sbomify.com/CVE-2026-51624/): Incorrect access control in the getStationMacByIp function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain a (high 7.5)
- [CVE-2026-51623](https://insights.sbomify.com/CVE-2026-51623/): Incorrect access control in the getDdnsStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain DDNS (high 7.5)
- [CVE-2026-51622](https://insights.sbomify.com/CVE-2026-51622/): Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WAN confi (critical 9.1)
- [CVE-2026-51621](https://insights.sbomify.com/CVE-2026-51621/): Incorrect access control in the getInitCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sensitiv (high 7.5)
- [CVE-2026-51620](https://insights.sbomify.com/CVE-2026-51620/): Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain netwo (high 7.5)
- [CVE-2026-5162](https://insights.sbomify.com/CVE-2026-5162/): Cross-site scripting in Royal Addons for Elementor – Addons and Templates Kit for Elementor (medium 6.4)
- [CVE-2026-51619](https://insights.sbomify.com/CVE-2026-51619/): Incorrect access control in the getOnlineClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain onl (high 7.5)
- [CVE-2026-51618](https://insights.sbomify.com/CVE-2026-51618/): Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain setup (high 7.5)
- [CVE-2026-51617](https://insights.sbomify.com/CVE-2026-51617/): Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sen (high 7.5)
- [CVE-2026-51616](https://insights.sbomify.com/CVE-2026-51616/): Incorrect access control in the getWanIeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain LAN add (high 7.5)
- [CVE-2026-51615](https://insights.sbomify.com/CVE-2026-51615/): Incorrect access control in the getLanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain LAN addre (high 7.5)
- [CVE-2026-51614](https://insights.sbomify.com/CVE-2026-51614/): Incorrect access control in the getAccessDeviceCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain (medium 4.3)
- [CVE-2026-51613](https://insights.sbomify.com/CVE-2026-51613/): Incorrect access control in the getDeviceInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain devic (medium 4.3)
- [CVE-2026-51611](https://insights.sbomify.com/CVE-2026-51611/): Incorrect access control in the startSlaveReboot function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to arbitrari (critical 9.8)
- [CVE-2026-51610](https://insights.sbomify.com/CVE-2026-51610/): Incorrect access control in the RebootSystem function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to arbitrarily f (medium 4.3)
- [CVE-2026-5161](https://insights.sbomify.com/CVE-2026-5161/): Improper Authentication in TUBITAK BILGEM's Pardus About (high 8.8)
- [CVE-2026-51606](https://insights.sbomify.com/CVE-2026-51606/): An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) causes the device to abruptly terminate (high 7.5)
- [CVE-2026-51605](https://insights.sbomify.com/CVE-2026-51605/): A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.991) allows an unauthenticated remote at (high 7.5)
- [CVE-2026-51604](https://insights.sbomify.com/CVE-2026-51604/): A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote att (high 7.5)
- [CVE-2026-51603](https://insights.sbomify.com/CVE-2026-51603/): A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote att (high 7.5)
- [CVE-2026-51602](https://insights.sbomify.com/CVE-2026-51602/): A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote att (high 7.5)
- [CVE-2026-51601](https://insights.sbomify.com/CVE-2026-51601/): Tenda CP3 V3.0 firmware V31.1.9.91 contains a stack-based buffer overflow in the RTSP service. (high 7.5)
- [CVE-2026-51600](https://insights.sbomify.com/CVE-2026-51600/): Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in RTSP requests (including DESCRIBE, SETUP, and PLAY methods). (high 7.5)
- [CVE-2026-5160](https://insights.sbomify.com/CVE-2026-5160/): goldmark vulnerable to Cross-site Scripting (XSS) (medium 5.1)
- [CVE-2026-51599](https://insights.sbomify.com/CVE-2026-51599/): An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows an unauthentica (critical 9.8)
- [CVE-2026-51598](https://insights.sbomify.com/CVE-2026-51598/): An input validation vulnerability in the RTSP service of MERCURY MIPC252W IP Camera v1.0.5 Build 230306 Rel.79931n) allows an unauthenticate (medium 6.5)
- [CVE-2026-51597](https://insights.sbomify.com/CVE-2026-51597/): MERCURY MIPC252W IP camera v1.0.5 Build 230306 Rel.79931n does not implement nonce expiration in RTSP Digest authentication. (critical 9.1)
- [CVE-2026-5159](https://insights.sbomify.com/CVE-2026-5159/): Cross-site scripting in Royal Addons for Elementor – Addons and Templates Kit for Elementor (medium 6.4)
- [CVE-2026-51584](https://insights.sbomify.com/CVE-2026-51584/): An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in ser (critical 9.8)
- [CVE-2026-51583](https://insights.sbomify.com/CVE-2026-51583/): An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery (SSRF) via the Webhook va (high 8.5)
- [CVE-2026-5158](https://insights.sbomify.com/CVE-2026-5158/): PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block (medium 6.4)
- [CVE-2026-51570](https://insights.sbomify.com/CVE-2026-51570/): modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file. (high 8.1)
- [CVE-2026-5157](https://insights.sbomify.com/CVE-2026-5157/): code-projects Online Food Ordering System Order order.php cross site scripting (medium 5.3)
- [CVE-2026-51568](https://insights.sbomify.com/CVE-2026-51568/): modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file. (high 8.1)
- [CVE-2026-51565](https://insights.sbomify.com/CVE-2026-51565/): Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attackers to inject arbitrar (medium 6.1)
- [CVE-2026-51564](https://insights.sbomify.com/CVE-2026-51564/): An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request. (medium 4.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/572/