Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
Unpatched vulnerabilities don't stay hidden on our atlas. #CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-105284 Vendor → Unknown Severity → Critical — CVSS 9.3 Product → Unknown Date → 2026-10-05 A critical vulnerability (Incorrect Privilege Assignment) has been disclosed affecting Unknown. Patch immediately. Powered by @Brandefense #ThreatIntel #CyberSecurity #CVE #Unknown
🚨 CVE-2026-105284 (CVSS 10.0 Critical - PoC Available) Totolink A3002MU routers contain an authentication bypass flaw in /bin/boa, allowing remote attackers to compromise the device. https://www.thehackerwire.com/vulnerability/CVE-2026-105284/ https://t.co/yOHCPXiimv
We have just added an important vulnerability affecting Totolink A3002MU (CVE-2026-105284) vuldb.com/vuln/413465