CVE-2026-15701: Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow
A weakness has been identified in Totolink NR1800X 9.1.0u.6279B20210910. Affected by this issue is the function FormLogout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-15701?
The severity of CVE-2026-15701 is rated as critical with a score of 9.8.
How do I fix CVE-2026-15701?
To fix CVE-2026-15701, update the Totolink NR1800X firmware to the latest version that addresses this vulnerability.
What impact does CVE-2026-15701 have on my system?
CVE-2026-15701 can lead to a stack-based buffer overflow, potentially allowing remote code execution.
What is the nature of the vulnerability in CVE-2026-15701?
CVE-2026-15701 is a buffer overflow vulnerability located in the Form_Logout function of lighttpd on the Totolink NR1800X.
Is CVE-2026-15701 exploitable remotely?
Yes, CVE-2026-15701 can be exploited remotely due to the manipulation of the Host argument.