Threats tagged 'ghsa-jhgg-p4c8-m4gr'

A critical security vulnerability (CVE-2026-7546) exists in Totolink NR1800X firmware version 9.1.0u.6279_B20210910. The flaw is a stack-based buffer overflow in the find_host_ip function of the lighttpd component, triggered by manipulation of the Host argument. This vulnerability can be exploited remotely without authentication. Public exploit code has been disclosed, increasing the risk of exploitation.