Vulnerability details

CVE-2026-7546

Totolink NR1800X

Totolink NR1800X lighttpd find_host_ip stack-based overflow

CVSS 4.0

9.3Critical

Official description

A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. The impacted element is the function find_host_ip of the component lighttpd. Such manipulation of the argument Host leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

CVSS scores

Score	Version	Source	Vector
9.3Critical	4.0	CVEProject cvelistV5 (CNA) (VulDB)	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P`
9.8Critical	3.1	CVEProject cvelistV5 (CNA) (VulDB)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:R`
9.8Critical	3.0	CVEProject cvelistV5 (CNA) (VulDB)	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:R`
10.0High	2.0	CVEProject cvelistV5 (CNA) (VulDB)	`AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:W/RC:UR`

Affected products

Vendor	Product	Versions	Source
Totolink	NR1800X	9.1.0u.6279_B20210910	CVEProject cvelistV5 (CNA)

References and advisories

https://vuldb.com/vuln/360357 vdb-entrytechnical-description
https://vuldb.com/vuln/360357/cti signaturepermissions-required
https://vuldb.com/submit/804404 third-party-advisory
https://github.com/newym/cve/blob/main/totolinknr1800x.md exploit
https://www.totolink.net/ product

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-05-01
Last updated: 2026-05-02
State: Published
Assigner (CNA): VulDB

Exploit prediction (EPSS)

0.75%

Probability of exploitation in 30 days

55.3%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: Yes
Exploitation: Proof of concept
Technical impact: Total

Weaknesses (CWE)

CWE-121
Stack-based Buffer Overflow
CWE-119
Memory Corruption