CVE-2026-7218
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
A buffer overflow vulnerability was detected in the Totolink N300RT router version 3.4.0-B20250430 in the is_cmd_string_valid function in /boafrm/formWsc of the libapmib.so component. Manipulating the localPin argument causes a buffer overflow. The attack can be carried out remotely, and the exploit is publicly available.
Risk Assessment
An attacker can remotely take control of the router, potentially compromising network security, intercepting traffic, or launching further attacks on local devices.
Recommendation
Update the Totolink N300RT firmware to the latest version if available. If not, consider replacing the device with a patched model or apply firewall rules to restrict access to the admin panel.
Other vulnerabilities in Totolink N300RT
See all- CVE-2025-34319Critical
TOTOLINK N300RT routers with firmware before V3.4.0-B20250430 have an OS command injection vulnerability in the Boa formWsc handling. An unauthenticated attacker can send crafted requests to execute commands via the targetAPSsid parameter.
- CVE-2026-7219High
A buffer overflow vulnerability has been found in Totolink N300RT 3.4.0-B20250430 in an unknown function of the file /boafrm/formIpQoS. Manipulating the argument entry_name can lead to buffer overflow, and the attack can be performed remotely. The exploit has been published and may be used.
Original NVD description (English source)
A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function is_cmd_string_valid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipulation of the argument localPin results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.