https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:26:24.421648+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-38587 cnvd-2026-38587 2026-10-06T14:26:24.473661+00:00 cnvd-2026-38587 https://cve.radiocsirt.org/vuln/euvd-2026-363218 EUVD-2026-363218 2026-10-06T14:26:24.473701+00:00 EUVD-2026-363218 https://cve.radiocsirt.org/vuln/fkie_cve-2026-51760 fkie_cve-2026-51760 2026-10-06T14:26:24.473716+00:00

Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to mass-trigger firmware update activity across mesh slaves via sending a crafted MQTT message to the cs_broker component.

 https://cve.radiocsirt.org/vuln/ghsa-4j88-2p5m-hm62 GHSA-4j88-2p5m-hm62 2026-10-06T14:26:24.473745+00:00

Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to mass-trigger firmware update activity across mesh slaves via sending a crafted MQTT message to the cs_broker component.