Description
Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi.
Published: 2026-08-31
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Incorrect access control in the killProcess function of TOTOLINK T6 firmware 4.1.5cu.748_B20211015 permits any network user to craft a POST request to /cgi-bin/cstecgi.cgi and terminate essential services, resulting in loss of availability for those services. The flaw does not provide code execution or data exfiltration capabilities, but it can be used to disrupt services on the device.

Affected Systems

The vulnerability affects TOTOLINK T6 routers running firmware version 4.1.5cu.748_B20211015. No other versions or vendors are documented as impacted.

Risk and Exploitability

The CVSS score and EPSS data are not available, yet the lack of authentication allows an attacker on the same network to exploit the flaw at any time. The flaw is not listed in the CISA KEV catalog, but its simplicity means it could be abused to cause denial of service in targeted attacks. No public exploit has been reported.

Generated by OpenCVE AI on August 31, 2026 at 21:48 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest firmware update that removes the unauthenticated killProcess endpoint.
  • If a firmware update is not yet available, block or deny traffic to /cgi-bin/cstecgi.cgi using network firewall rules or router access control.
  • If the firmware allows it, disable or remove the killProcess functionality from the router configuration.
  • Monitor router logs for unexpected POST attempts to cgi-bin endpoints and investigate anomalies.

Generated by OpenCVE AI on August 31, 2026 at 21:48 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 31 Aug 2026 22:15:00 +0000

Type Values Removed Values Added
Title Unauthenticated Access Control Flaw Enables Process Termination in TOTOLINK T6 Router
Weaknesses CWE-284

Mon, 31 Aug 2026 20:00:00 +0000

Type Values Removed Values Added
Description Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi.
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-31T19:52:03.333Z

Reserved: 2026-06-08T00:00:00.000Z

Link: CVE-2026-51740

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-08-31T20:17:05.320

Modified: 2026-08-31T20:59:32.817

Link: CVE-2026-51740

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-31T22:00:06Z

Weaknesses