Unauthenticated MQTT Access Control Bypass in TOTOLIK Routers

CVE-2026-51743 represents a critical access control failure in TOTOLINK T6 routers (version 4.1.5cu.748_B20211015) where the guest_wifi_sync function fails to properly authenticate MQTT message sources. This vulnerability allows unauthenticated attackers to disable guest virtual access point interfaces by sending specially crafted messages to the cs_broker component, effectively performing a denial-of-service attack against network guest functionality. The flaw is particularly concerning because MQTT is commonly used for IoT device management and inter-component communication, meaning attackers on the same network—or potentially remote attackers if MQTT is exposed—can manipulate critical network infrastructure without any credentials. Small office and home office (SOHO) environments relying on TOTOLINK routers for guest network isolation face immediate risk, as do organizations using these devices in edge deployments.

While this CVE lacks current MITRE ATT&CK mappings, Casky's 754 security skills enable Claude AI to detect the attack patterns underlying this vulnerability through extended reasoning across multiple security domains. Practitioners would observe findings related to CWE-284 (Improper Access Control) detection, including unauthenticated API/protocol interactions, unvalidated message processing in MQTT brokers, and privilege escalation through component manipulation. Casky's skill library would flag suspicious patterns such as: unauthenticated state-changing operations, guest network configuration modifications without authentication context, and anomalous MQTT publish events from unknown sources targeting the cs_broker. Security teams would see recommendations to monitor for T1562 (Impair Defenses) activities—specifically disabling or modifying guest access controls—and implement network segmentation isolating MQTT communication channels. The platform's reasoning engine would correlate these indicators with typical SOHO exploitation patterns, helping practitioners prioritize patching and implement compensating controls like MQTT authentication enforcement and network access restrictions.