CVE-2026-105284

CRITICAL 10.0CVE-2026-105284 · Published 05/10/2026 · updated 06/10/2026

In short

CVE-2026-105284 is a CRITICAL (CVSS 10.0) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.83%, higher than 57.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

References

gist.github.com/H3rmesk1t/ac6e91a8fba51002be085755c8bf7d43
vuldb.com/cve/CVE-2026-105284
vuldb.com/submit/977217
vuldb.com/vuln/413465
vuldb.com/vuln/413465/cti
totolink.net

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free