Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to generate and… (CVE-2026-51628)

The vulnerability in TOTOLINK T6 4.1.5cu.748_B20211015 involves improper access control in the getGenerateWiFiWpsPin function. An attacker without authentication can exploit this by sending a specially crafted POST request to the /cgi-bin/cstecgi.cgi CGI endpoint, resulting in the generation and retrieval of a new WiFi Protected Setup (WPS) PIN. This could potentially allow unauthorized access to the device's wireless network configuration.

Unauthenticated attackers can generate and obtain a new WPS PIN, which may enable them to connect to the wireless network without authorization. This compromises the confidentiality and integrity of the network access controls. No information about active exploitation in the wild or further impact details is provided.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is available at this time. Until a fix is released, restrict network access to the device's management interface and monitor for suspicious POST requests to /cgi-bin/cstecgi.cgi.