CVE-2026-51750: TOTOLINK T6 vulnerability
Published Sep 1, 2026
·Updated
Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to rescan and switch the primary mesh channel via sending a crafted MQTT message to the csbroker component.
Affected Software
1 affected component
TOTOLINK T6=4.1.5cu.748_B20211015
Event History
Sep 1, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
Which systems are exposed to this issue?
TOTOLINK T6 devices running firmware version 4.1.5cu.748_B20211015 are identified as affected. Exposure requires that an attacker can send a crafted MQTT message to the device's cs_broker component.
2
What can an unauthenticated attacker do?
An unauthenticated attacker can trigger a rescan and switch the primary mesh channel by exploiting incorrect access control in the updatePriChannel function.
3
Does exploitation require valid device credentials?
No. The issue is described as exploitable by unauthenticated attackers using a crafted MQTT message.