CVE-2026-94954

24th percentile - higher than 24% of all known CVEs

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter (access-control / URL filter configuration handler) and is triggered by the url request parameter when the addFilterUrl (or addFilterUrlFlag) action flag is set.

An attacker could remotely exploit the vulnerability to execute arbitrary code or cause a denial of service. This may lead to router compromise and network traffic control.

Update TOTOLINK N150RT firmware to the latest version if available. If not, consider disabling remote management or restricting access to the web interface.