CVE-2026-51640

TOTOLINK T6 version 4.1.5cu.748_B20211015 is vulnerable due to incorrect access control in the getMeshNeighborTable function, allowing unauthenticated attackers to retrieve sensitive mesh neighbor information by sending a specially crafted POST request to /cgi-bin/cstecgi.cgi. This vulnerability poses a risk to network security, as it exposes potentially sensitive topology information that could be exploited for further attacks. Network administrators and security teams managing affected devices should prioritize remediation to mitigate the risk of unauthorized access.