CVE-2026-94952

Deferred Deferred - Pending Action

Stack-Based Buffer Overflow in TOTOLINK N150RT Firmware

Publication date: 2026-09-29

Last updated on: 2026-09-30

Assigner: MITRE

Description

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formPortFw (port-forwarding configuration handler) and is triggered by the ip_subnet and fw_ip request parameters during the rule-addition flow.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-09-30

Generated

2026-10-19

AI Q&A

2026-09-30

EPSS Evaluated

2026-10-18

NVD

CVE-2026-94952

Affected Vendors & Products

Vendor	Product	Version / Range
totolink	n150rt	3.4.0-b20201030

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a stack-based buffer overflow vulnerability in the web management interface of TOTOLINK N150RT (NTR150) firmware version V3.4.0-B20201030. It is triggered through the /boafrm/formPortFw route during the port-forwarding rule-addition process when the ip_subnet and fw_ip parameters are manipulated.

Detection Guidance

To detect this vulnerability, check if your TOTOLINK N150RT device is running firmware version V3.4.0-B20201030 or similar. Inspect network traffic for requests to the /boafrm/formPortFw endpoint with ip_subnet and fw_ip parameters. Monitor for unusual crashes or buffer overflow errors in the device logs.

Impact Analysis

An attacker could exploit this to execute arbitrary code on the device, potentially gaining control over the router. This may lead to network compromise, unauthorized access, or disruption of network services.

Compliance Impact

The provided CVE data does not specify direct implications for compliance with standards like GDPR or HIPAA. The vulnerability involves a stack-based buffer overflow in a network device's web interface, which could potentially allow unauthorized access or control of the device. However, without additional context on data exposure or processing, its impact on regulatory compliance cannot be determined.

Mitigation Strategies

Immediately update the TOTOLINK N150RT firmware to the latest version to patch the stack-based buffer overflow in the web management interface. Disable remote access to the web interface if not required. Monitor network traffic for unusual activity related to the /boafrm/formPortFw route or parameters ip_subnet and fw_ip.

Hi! I’m here to help you understand CVE-2026-94952. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70