https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:13:51.139461+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-38590 cnvd-2026-38590 2026-10-08T08:13:51.189853+00:00 cnvd-2026-38590 https://cve.radiocsirt.org/vuln/euvd-2026-363273 EUVD-2026-363273 2026-10-08T08:13:51.189893+00:00 EUVD-2026-363273 https://cve.radiocsirt.org/vuln/fkie_cve-2026-51757 fkie_cve-2026-51757 2026-10-08T08:13:51.189907+00:00

Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start a firmware download or flash workflow on the slave device via sending a crafted MQTT message to the cs_broker component.

 https://cve.radiocsirt.org/vuln/ghsa-9qxh-35cv-gh5r GHSA-9qxh-35cv-gh5r 2026-10-08T08:13:51.189937+00:00

Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start a firmware download or flash workflow on the slave device via sending a crafted MQTT message to the cs_broker component.