PT-2026-58102 · Totolink+1 · Nr1800X+1

Fuguang · Published 2026-07-14 · Updated 2026-07-15 · CVE-2026-15701

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Totolink NR1800X version 9.1.0u.6279 B20210910

Description A stack-based buffer overflow occurs in the Form Logout() function within the /formLogout.htm file of the lighttpd component. This issue is triggered by the manipulation of the Host argument and can be exploited remotely.

Recommendations Update Totolink NR1800X version 9.1.0u.6279 B20210910 to a patched version.

Exploit

Fix

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

CVE-2026-15701

Affected Products

Nr1800X

Lighttpd

References · 9

• 🔥 https://github.com/fu9-dotom/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15701 · Security Note
• https://twitter.com/OrizonCyber/status/2077128515921613033 · Twitter Post
• https://vuldb.com/vuln/378248/cti · Note
• https://vuldb.com/vuln/378248 · Note
• https://vuldb.com/cve/CVE-2026-15701 · Note
• https://vuldb.com/submit/856136 · Note
• https://twitter.com/SecurityAr58409/status/2077333285017985038 · Twitter Post
• https://totolink.net · Note