CVE-2026-7219

🗓️ 28 Apr 2026 03:00:23Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 10 Views🌐 WEB

Totolink N300RT remote buffer overflow in /boafrm/formIpQoS from entry_name manipulation exploited.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-7219	28 Apr 202603:00	–	attackerkb
BDU FSTEC	The vulnerability of the /boafrm/formIpQoS file of TOTOLINK N300RT microprogramming software allows a attacker to cause a service failure or execute arbitrary code.	13 Jul 202600:00	–	bdu_fstec
CNNVD	TOTOLINK N300RT 缓冲区错误漏洞	28 Apr 202600:00	–	cnnvd
Cvelist	CVE-2026-7219 Totolink N300RT formIpQoS buffer overflow	28 Apr 202603:00	–	cvelist
EUVD	EUVD-2026-25975	28 Apr 202603:00	–	euvd
NVD	CVE-2026-7219	28 Apr 202604:16	–	nvd
Positive Technologies	PT-2026-35651	28 Apr 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-7219	29 Apr 202614:48	–	redhatcve
Vulnrichment	CVE-2026-7219 Totolink N300RT formIpQoS buffer overflow	28 Apr 202603:00	–	vulnrichment

[
  {
    "vendor": "Totolink",
    "product": "N300RT",
    "versions": [
      {
        "version": "3.4.0-B20250430",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:totolink:n300rt_firmware:*:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
totolink	www.totolink.net/
github	www.github.com/xiaohaiyang-ai/IoT-Vulnerability-Research/tree/main/Vendors/TOTOLINK/N300RT/formIpQoS-Bof
vuldb	www.vuldb.com/vuln/359819
vuldb	www.vuldb.com/submit/808194
vuldb	www.vuldb.com/vuln/359819/cti

Parameter	Position	Path	Description	CWE
entry_name	request body	/boafrm/formIpQoS	Buffer overflow via entry_name parameter in /boafrm/formIpQoS on Totolink N300RT 3.4.0-B20250430 (remote exploit)	CWE-119, CWE-120

17 Jun 2026 11:02Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.2

CVSS 28.3

CVSS 48.6

CVSS 37.2

EPSS0.00589

SSVC