Stack-based Buffer Overflow in TOTOLINK N150RT Web Management Interface
CVE-2026-94953

8.8HIGH

Key Information:

Vendor

TOTOLINK
Status
N150RT
Vendor
CVE Published:
29 September 2026

What is CVE-2026-94953?

A stack-based buffer overflow vulnerability has been identified in the web management interface of TOTOLINK N150RT firmware version V3.4.0-B20201030. This vulnerability can be exploited through the route /boafrm/formAjaxSet, specifically when handling the ApCliWEPKey field via the topicurl=setting/setWiFiRepeaterConfig branch. Successful exploitation may allow an attacker to execute arbitrary code, potentially compromising the affected system's integrity.

References

https://gist.github.com/H3rmesk1t/039c2c968fd535cfffecdf9...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.