SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-51673

HIGH · CVSS 7.5 EPSS 0.33% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-31 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

TOTOLINK T6 versions prior to 4.1.5cu.748_B20211015 are vulnerable due to incorrect access control in the setNtpCfg function, allowing unauthenticated attackers to modify time synchronization settings through a crafted POST request. This vulnerability could lead to potential disruptions in network operations and time-based attacks. Organizations using affected TOTOLINK devices should prioritize remediation to mitigate risks associated with unauthorized access and manipulation of critical system configurations.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-51673
Severity
HIGH
CVSS
7.5
EPSS
0.33%

Original NVD Description

Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to alter time synchronization settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi.