Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entry_name leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
Unpatched vulnerabilities don't stay hidden on our atlas. #CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-105285 Vendor → Unknown Severity → Critical — CVSS 9.3 Product → Unknown Date → 2026-10-05 A critical vulnerability (Improper Restriction of Operations within the Bounds of a Memory Buffer) has been disclosed affecting Unknown. Patch immediately. Powered by @Brandefense #ThreatIntel #CyberSecurity #CVE #Unknown
🚨 CVE-2026-105285 (CVSS 10.0 Critical - PoC Available) Totolink A3002MU is vulnerable to a stack buffer overflow in its QoS handler, allowing remote attackers to achieve code execution. https://www.thehackerwire.com/vulnerability/CVE-2026-105285/ https://t.co/odp0olMsZL
There is a new vulnerability with elevated criticality in Totolink A3002MU (CVE-2026-105285) vuldb.com/vuln/413466