PT-2026-35651 · Totolink · Rt-N300

Xyhackr · Published 2026-04-28 · Updated 2026-04-28 · CVE-2026-7219

Mitre

CVSS v3.1

7.2

High

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entry name can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-7219

Affected Products

Rt-N300

References · 6

• 🔥 https://github.com/xiaohaiyang-ai/IoT-Vulnerability-Research/tree/main/Vendors/TOTOLINK/N300RT/formIpQoS-Bof · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7219 · Security Note
• https://vuldb.com/vuln/359819/cti · Note
• https://totolink.net · Note
• https://vuldb.com/vuln/359819 · Note
• https://vuldb.com/submit/808194 · Note