Vulnerability Description
A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entry_name can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/xiaohaiyang-ai/IoT-Vulnerability-Research/tree/main/Vendors/T
- https://vuldb.com/submit/808194
- https://vuldb.com/vuln/359819
- https://vuldb.com/vuln/359819/cti
- https://www.totolink.net/
FAQ
What is CVE-2026-7219?
CVE-2026-7219 is a vulnerability with a CVSS score of 7.2 (HIGH). A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entry_name can lead to buffer overflo...
How severe is CVE-2026-7219?
CVE-2026-7219 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-7219?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.