Skip to content
Critical CVE-2026-105284 in Totolink A3002MU Allows Remote Unauthorized Access

Critical CVE-2026-105284 in Totolink A3002MU Allows Remote Unauthorized Access

First seen 5 Oct 2026, 20:27 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 5, 2026 at 21:26 UTC
  • •CVE-2026-105284 allows remote unauthorized access to Totolink A3002MU devices.
  • •The vulnerability has a CVSS score of 10.0, marking it as critical.
  • •No public proof-of-concept or active exploitation has been reported yet.

A critical vulnerability, CVE-2026-105284, has been identified in the Totolink A3002MU router, specifically in the authentication check function located in /bin/boa. This flaw allows unauthenticated remote attackers to bypass authentication and gain unauthorized access to the device. The vulnerability affects devices running firmware version 1.0.0-B20230403.1455. Currently, there is no public proof-of-concept or evidence of, but the CVSS score is 10.0, indicating a critical severity level. Users are advised to restrict network access and monitor for suspicious activity until a patch is released. The vulnerability was disclosed on October 5, 2026, and no patch information has been provided yet.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-05
CVE-2026-105284 published
A critical vulnerability in Totolink A3002MU was disclosed, allowing remote unauthorized access.
Feedly
2026-10-05
CVE-2026-105284 reported by Sploitus
Sploitus reported the vulnerability, confirming the affected firmware version and potential attack vector.
Sploitus

More articles in this cluster (3)

Following this threat?

Track CVE-2026-105284 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 4

Common questions

Which devices are affected?
The Totolink A3002MU router running firmware version 1.0.0-B20230403.1455 is affected.
Is there a patch available?
No patch information has been provided yet; users should monitor for updates.
What immediate actions should be taken?
Restrict network access to the device and monitor for any suspicious activity.