A weakness in the authentication check function sub_40FCFC of the /bin/boa component in Totolink A3002MU allows improper authorization through manipulation of the authentication mechanism.
An unauthenticated attacker over the network can bypass authentication checks and gain unauthorized access to the device, potentially allowing them to modify device configuration, access sensitive data, and disrupt service availability.
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Patch information not provided in vulnerability data.
Upgrade Totolink A3002MU firmware to a patched version once available. Until a patch is released, restrict network access to the device's web interface through firewall rules, disable remote management if not required, and monitor for suspicious access attempts to the /bin/boa component. Consider isolating affected devices on a restricted network segment.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Feedly found the first article mentioning CVE-2026-105284 . See article
NVD published the first details for CVE-2026-105284
A CVSS base score of 10 has been assigned.
GitHub Advisories released a security advisory .
Links to Mitre Att&cks
CVE-2026-105284: Totolink A3002MU Improper Authorization Allows Remote Unauthenticated Access
CVE-2026-105284 - Exploits & Severity - Feedly
CVE-2026-105284: Totolink A3002MU Improper Authorization Allows Remote Unauthenticated Access
CVE Daily Brief — 2026-10-05
CVE-2026-105284 exploit
Be the first to know critical vulnerabilities
Collect, analyze, and vulnerability reports faster using AI
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
