https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-8170.htmlhttps://patchthecve.com/cve/CVE-2025-8170.htmlWed, 17 Jun 2026 10:06:26 +0000HIGH 8.8: A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015. This vulnerability affects the function tcpcheck_net of the file /router/meshSlaveDlfw of the component MQTT Packet Handler. The manipulation of the argument serverIp leads to buffer overflow. The attack can be inhttps://patchthecve.com/cve/CVE-2025-7952.htmlhttps://patchthecve.com/cve/CVE-2025-7952.htmlWed, 17 Jun 2026 10:06:02 +0000MEDIUM 6.3: A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. This vulnerability affects the function ckeckKeepAlive of the file wireless.so of the component MQTT Packet Handler. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2025-7913.htmlhttps://patchthecve.com/cve/CVE-2025-7913.htmlWed, 17 Jun 2026 10:05:57 +0000HIGH 8.8: A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. Affected is the function updateWifiInfo of the component MQTT Service. The manipulation of the argument serverIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit has https://patchthecve.com/cve/CVE-2025-7912.htmlhttps://patchthecve.com/cve/CVE-2025-7912.htmlWed, 17 Jun 2026 10:05:57 +0000HIGH 8.8: A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748_B20211015. This issue affects the function recvSlaveUpgstatus of the component MQTT Service. The manipulation of the argument s leads to buffer overflow. The attack may be initiated remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-7862.htmlhttps://patchthecve.com/cve/CVE-2025-7862.htmlWed, 17 Jun 2026 10:05:48 +0000HIGH 7.3: A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnerability is the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component Telnet Service. The manipulation of the argument telnet_enabled with the input 1 leads to misshttps://patchthecve.com/cve/CVE-2025-7758.htmlhttps://patchthecve.com/cve/CVE-2025-7758.htmlWed, 17 Jun 2026 10:05:36 +0000HIGH 8.8: A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015. Affected by this issue is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to buffer overflhttps://patchthecve.com/cve/CVE-2025-7615.htmlhttps://patchthecve.com/cve/CVE-2025-7615.htmlWed, 17 Jun 2026 10:05:21 +0000MEDIUM 6.3: A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. Affected by this vulnerability is the function clearPairCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to command injection. The attack can be launhttps://patchthecve.com/cve/CVE-2025-7614.htmlhttps://patchthecve.com/cve/CVE-2025-7614.htmlWed, 17 Jun 2026 10:05:21 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in TOTOLINK T6 4.1.5cu.748. Affected is the function delDevice of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ipAddr leads to command injection. It is possible to launch the attack rehttps://patchthecve.com/cve/CVE-2025-7613.htmlhttps://patchthecve.com/cve/CVE-2025-7613.htmlWed, 17 Jun 2026 10:05:20 +0000MEDIUM 6.3: A vulnerability was found in TOTOLINK T6 4.1.5cu.748. It has been rated as critical. This issue affects the function CloudSrvVersionCheck of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to command injection. The attack may be inihttps://patchthecve.com/cve/CVE-2025-7525.htmlhttps://patchthecve.com/cve/CVE-2025-7525.htmlWed, 17 Jun 2026 10:05:08 +0000MEDIUM 6.3: A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument command leads to command injection.https://patchthecve.com/cve/CVE-2025-7524.htmlhttps://patchthecve.com/cve/CVE-2025-7524.htmlWed, 17 Jun 2026 10:05:08 +0000MEDIUM 6.3: A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015. It has been classified as critical. This affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to command injection. It is possible tohttps://patchthecve.com/cve/CVE-2025-7460.htmlhttps://patchthecve.com/cve/CVE-2025-7460.htmlWed, 17 Jun 2026 10:05:00 +0000HIGH 8.8: A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnerability is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. Thttps://patchthecve.com/cve/CVE-2025-6916.htmlhttps://patchthecve.com/cve/CVE-2025-6916.htmlWed, 17 Jun 2026 10:02:51 +0000HIGH 8.8: A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. This affects the function Form_Login of the file /formLoginAuth.htm. The manipulation of the argument authCode/goURL leads to missing authentication. The attack needs to be initiated within the local n