CVE-2026-94952: n/a
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formPortFw (port-forwarding configuration handler) and is triggered by the ip_subnet and fw_ip request parameters during the rule-addition flow.
AI Analysis
Technical Summary
CVE-2026-94952 is a stack-based buffer overflow vulnerability in the TOTOLINK N150RT (NTR150) router firmware version 3.4.0-B20201030. The flaw is reachable through the web management interface endpoint /boafrm/formPortFw, specifically when handling the ip_subnet and fw_ip parameters during the addition of port-forwarding rules. This vulnerability could allow an attacker to cause memory corruption by sending crafted requests to this interface.
Potential Impact
Successful exploitation of this vulnerability could lead to memory corruption on the affected device. The exact impact is not detailed in the provided information, but stack-based buffer overflows typically risk denial of service or potential code execution on the device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restricting access to the web management interface and avoiding use of the vulnerable functionality may reduce risk.
CVE-2026-94952: n/a
Description
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formPortFw (port-forwarding configuration handler) and is triggered by the ip_subnet and fw_ip request parameters during the rule-addition flow.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-94952 is a stack-based buffer overflow vulnerability in the TOTOLINK N150RT (NTR150) router firmware version 3.4.0-B20201030. The flaw is reachable through the web management interface endpoint /boafrm/formPortFw, specifically when handling the ip_subnet and fw_ip parameters during the addition of port-forwarding rules. This vulnerability could allow an attacker to cause memory corruption by sending crafted requests to this interface.
Potential Impact
Successful exploitation of this vulnerability could lead to memory corruption on the affected device. The exact impact is not detailed in the provided information, but stack-based buffer overflows typically risk denial of service or potential code execution on the device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restricting access to the web management interface and avoiding use of the vulnerable functionality may reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-09-22T00:00:00.000Z
- State
- PUBLISHED
Threat ID: 6abc2560680226ef684413df
Added to database: 09/29/2026, 20:53:52 UTC
Last enriched: 09/29/2026, 21:51:54 UTC
Last updated: 09/30/2026, 03:38:31 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.