A vulnerability classified as critical has been found in TOTOLINK T10 4.1.8cu.5241_B20210927. Affected is an unknown function of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input
1
leads to improper authentication.
This vulnerability is documented as CVE-2025-9533. The attack can be initiated remotely. Additionally, an exploit exists.