A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. The impacted element is the function find_host_ip of the component lighttp…

A stack-based buffer overflow vulnerability (CVE-2026-7546) has been discovered in Totolink NR1800X router firmware version 9.1.0u.6279_B20210910. The vulnerability exists in the find_host_ip function of the lighttpd component and can be triggered by manipulating the Host argument. This vulnerability can be exploited remotely and public exploits are available, making it a high-risk security issue for affected devices.