{"uuid": "38df0c08-2d38-4a41-85d9-a7083d020a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105284", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117388189935603535", "content": "Totolink A3002MU (v1.0.0-B20230403.1455) hit by CRITICAL CVE-2026-105284 \u2014 improper auth in /bin/boa (CVSS 10). Remote attackers can bypass auth; public exploit exists. Restrict admin access, monitor vendor. https://radar.offseq.com/threat/cve-2026-105284-improper-authorization-in-totolink-a3002mu-1d61e588042247d2 #OffSeq #CVE2026105284 #IoTSecurity", "creation_timestamp": "2026-10-05T12:00:30.122499Z"}