Nr1800X Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:nr1800x_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | Nr1800X Firmware (1f55f5e5-6988-5b98-a2ed-d71ce843675c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-15701 |
vulnerable | 2026-07-29 00:26:18.391638 |
Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow
CRITICAL (9.8)
A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-07-14T16:30:10.560Z
Updated: 2026-07-15T14:50:35.949Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7548 |
vulnerable | 2026-06-08 08:08:57.385690 |
Totolink NR1800X cstecgi.cgi sub_41A68C command injection
HIGH (8.8)
A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function sub_41A68C of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument setUssd results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2026-05-01T02:30:14.699Z
Updated: 2026-05-01T14:08:41.369Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7546 |
vulnerable | 2026-06-08 08:08:57.385225 |
Totolink NR1800X lighttpd find_host_ip stack-based overflow
CRITICAL (9.8)
A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910. The impacted element is the function find_host_ip of the component lighttpd. Such manipulation of the argument Host leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-05-01T02:15:12.350Z
Updated: 2026-05-01T21:28:56.710Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5030 |
vulnerable | 2026-06-08 08:07:02.899554 |
Totolink NR1800X Telnet Service cstecgi.cgi NTPSyncWithHost command injection
MEDIUM (6.3)
A vulnerability has been found in Totolink NR1800X 9.1.0u.6279_B20210910. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Telnet Service. The manipulation of the argument host_time leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-03-29T03:30:15.254Z
Updated: 2026-03-30T13:28:48.091Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1328 |
vulnerable | 2026-06-08 07:49:08.277943 |
Totolink NR1800X POST Request cstecgi.cgi setWizardCfg buffer overflow
HIGH (8.8)
A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. Impacted is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
Published: 2026-01-22T14:32:13.191Z
Updated: 2026-02-23T08:53:16.410Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1327 |
vulnerable | 2026-06-08 07:49:08.277384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1326 |
vulnerable | 2026-06-08 07:49:08.274822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.