CVE-2026-7546 - Vulnerability Analysis

Overview

Totolink NR1800X 9.1.0u.6279_B20210910 contains a stack-based buffer overflow caused by manipulation of the Host argument in the find_host_ip function of lighttpd, letting remote attackers execute code, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version.

References

• https://github.com/newym/cve/blob/main/totolinknr1800x.md
• https://vuldb.com/submit/804404
• https://vuldb.com/vuln/360357
• https://vuldb.com/vuln/360357/cti
• https://www.totolink.net/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner