CVE-2026-51719: n/a

The vulnerability identified as CVE-2026-51719 affects TOTOLINK T6 firmware 4.1.5cu.748_B20211015. It arises from improper access control in the delUrlFilterRules function, which handles deletion of URL filtering rules. An unauthenticated attacker can exploit this flaw by sending a specially crafted POST request to the /cgi-bin/cstecgi.cgi endpoint, enabling them to remove URL filtering rules without authorization. This compromises the integrity of the device's filtering policies but does not affect confidentiality or availability. No patch or official remediation information is currently available.

Exploitation of this vulnerability allows an unauthenticated attacker to remove URL filtering rules on the affected device, undermining the integrity of the device's security controls. This could enable bypassing of content filtering policies. There is no indication of impact on confidentiality or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, restrict network access to the device's management interface to trusted users only and monitor for suspicious POST requests to /cgi-bin/cstecgi.cgi. Avoid exposing the device management interface to untrusted networks.