https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:38:35.373130+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-38591 cnvd-2026-38591 2026-10-07T21:38:35.427133+00:00 cnvd-2026-38591 https://cve.radiocsirt.org/vuln/euvd-2026-362748 EUVD-2026-362748 2026-10-07T21:38:35.427178+00:00 EUVD-2026-362748 https://cve.radiocsirt.org/vuln/fkie_cve-2026-51756 fkie_cve-2026-51756 2026-10-07T21:38:35.427193+00:00

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the cs_broker component.

 https://cve.radiocsirt.org/vuln/ghsa-53c4-935x-4h8m GHSA-53c4-935x-4h8m 2026-10-07T21:38:35.427241+00:00

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a crafted MQTT message to the cs_broker component.