CVE-2026-105284: Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization

Severity: critical (CVSS 10.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-05 · updated 2026-10-06
Weakness: CWE-266

Description

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

Affected products

Totolink A3002MU: 1.0.0-B20230403.1455

References

https://gist.github.com/H3rmesk1t/ac6e91a8fba51002be085755c8bf7d43
https://vuldb.com/cve/CVE-2026-105284
https://vuldb.com/submit/977217
https://vuldb.com/vuln/413465
https://vuldb.com/vuln/413465/cti
https://www.totolink.net/

Get alerted when CVE-2026-105284 or the next vulnerability affects your stack