Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-15701

Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow

Description

A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Totolink NR1800X

  • 9.1.0u.6279_B20210910affected

References