CVE-2026-15701 | Totolink NR1800X 9.1.0u.6279_B20210910 lighttpd /formLogout.htm Form_Logout Host stack-based overflow

A vulnerability identified as critical has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow.

This vulnerability is tracked as CVE-2026-15701. The attack is possible to be carried out remotely. Moreover, an exploit is present.