CVE-2026-7219: Totolink n300rt

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argument entry_name can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

Affected products

• Totolink n300rt: version 3.4.0-B20250430 only

Published 2026-04-28. Last modified 2026-07-24.