CVE-2025-6916 | TOTOLINK T6 4.1.5cu.748_B20211015 /formLoginAuth.htm Form_Login authCode/goURL missing authentication

A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. This affects the function Form_Login of the file /formLoginAuth.htm. The manipulation of the argument authCode/goURL leads to missing authentication.

This vulnerability is uniquely identified as CVE-2025-6916. The attack needs to be initiated within the local network. Furthermore, there is an exploit available.

It is recommended to apply restrictive firewalling.