OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-105284

CRITICAL · CVSS 10 EPSS 0.78% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-10-05 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

A critical vulnerability exists in the authentication mechanism of Totolink A3002MU version 1.0.0-B20230403.1455, specifically within the function sub_40FCFC of the /bin/boa file, allowing for improper authorization. This flaw can be exploited remotely, potentially enabling attackers to gain unauthorized access to the device. Organizations using this product should prioritize immediate patching to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-105284
Severity
CRITICAL
CVSS
10
EPSS
0.78%

Original NVD Description

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.