High severity8.8NVD Advisory· Published Jun 30, 2025· Updated Apr 29, 2026
CVE-2025-6916
CVE-2025-6916
Description
A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. This affects the function Form_Login of the file /formLoginAuth.htm. The manipulation of the argument authCode/goURL leads to missing authentication. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:o:totolink:t6_firmware:v4.1.5cu.748_b20211015:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- github.com/c0nyy/IoT_vuln/blob/main/TOTOLINK%20T6%20Vuln.mdnvdExploitThird Party Advisory
- vuldb.comnvdPermissions RequiredThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- www.totolink.netnvdProduct
News mentions
0No linked articles in our index yet.