<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-10T17:07:18.403533+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e106b3ca-7082-49d1-a9c3-351b526fe359/export</id>
    <title>e106b3ca-7082-49d1-a9c3-351b526fe359</title>
    <updated>2026-10-10T17:07:18.428567+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e106b3ca-7082-49d1-a9c3-351b526fe359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcbqx7gni2l", "content": "CVE-2026-105284 - a3002mu\nThe Totolink A3002MU router has a flaw in its login check that could let someone bypass authentication. An attacker could exploit this from anywhere on the internet to gain access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#a3002mu #totolink #CVE #infosec", "creation_timestamp": "2026-10-07T15:40:05.205577Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e106b3ca-7082-49d1-a9c3-351b526fe359/export"/>
    <published>2026-10-07T15:40:05.205577+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dcee81c7-13d4-4978-9b44-0910245d4b89/export</id>
    <title>dcee81c7-13d4-4978-9b44-0910245d4b89</title>
    <updated>2026-10-10T17:07:18.430419+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dcee81c7-13d4-4978-9b44-0910245d4b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "published-proof-of-concept", "source": "Telegram/zC7t4Lx05uyfmCVlTGAKrLAcTODowFQbx3kd_6HhY1YAH_E", "content": "", "creation_timestamp": "2026-10-05T15:00:22.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dcee81c7-13d4-4978-9b44-0910245d4b89/export"/>
    <published>2026-10-05T15:00:22+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cc0fcace-8699-4a6b-aadc-3b2ecb6d0a1e/export</id>
    <title>cc0fcace-8699-4a6b-aadc-3b2ecb6d0a1e</title>
    <updated>2026-10-10T17:07:18.430523+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cc0fcace-8699-4a6b-aadc-3b2ecb6d0a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105284", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx4uki526t2x", "content": "Totolink A3002MU (v1.0.0-B20230403.1455) faces CRITICAL CVE-2026-105284 (CVSS 10): remote auth bypass due to improper authorization. Public exploit out. Restrict device access &amp;amp; check for updates. https://radar.offseq.com/threat/cve-2026-105284-improper-authorization-in-totolink-a3002mu-1d61e5880...", "creation_timestamp": "2026-10-05T12:00:31.726561Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cc0fcace-8699-4a6b-aadc-3b2ecb6d0a1e/export"/>
    <published>2026-10-05T12:00:31.726561+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/38df0c08-2d38-4a41-85d9-a7083d020a6f/export</id>
    <title>38df0c08-2d38-4a41-85d9-a7083d020a6f</title>
    <updated>2026-10-10T17:07:18.430617+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "38df0c08-2d38-4a41-85d9-a7083d020a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105284", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117388189935603535", "content": "Totolink A3002MU (v1.0.0-B20230403.1455) hit by CRITICAL CVE-2026-105284 \u2014 improper auth in /bin/boa (CVSS 10). Remote attackers can bypass auth; public exploit exists. Restrict admin access, monitor vendor. https://radar.offseq.com/threat/cve-2026-105284-improper-authorization-in-totolink-a3002mu-1d61e588042247d2 #OffSeq #CVE2026105284 #IoTSecurity", "creation_timestamp": "2026-10-05T12:00:30.122499Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/38df0c08-2d38-4a41-85d9-a7083d020a6f/export"/>
    <published>2026-10-05T12:00:30.122499+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/915be7dc-1c89-446a-a55d-bc081a7ab3fb/export</id>
    <title>915be7dc-1c89-446a-a55d-bc081a7ab3fb</title>
    <updated>2026-10-10T17:07:18.430693+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "915be7dc-1c89-446a-a55d-bc081a7ab3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx4rcbk7q22e", "content": "\ud83d\udd34 CVE-2026-105284 - Critical (10)\n\nA weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105284/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T11:02:14.872970Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/915be7dc-1c89-446a-a55d-bc081a7ab3fb/export"/>
    <published>2026-10-05T11:02:14.872970+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/98a1346e-e650-4fdd-a36c-c6b5d5125979/export</id>
    <title>98a1346e-e650-4fdd-a36c-c6b5d5125979</title>
    <updated>2026-10-10T17:07:18.430765+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "98a1346e-e650-4fdd-a36c-c6b5d5125979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx4oaggxhk2l", "content": "\ud83d\udea8 CVE-2026-105284 \u2014 CVSS 9.3 CRITICAL\n\nA weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the functi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105284\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T10:07:30.834147Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/98a1346e-e650-4fdd-a36c-c6b5d5125979/export"/>
    <published>2026-10-05T10:07:30.834147+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/98cfa7f2-8e46-49ba-891e-aac5024ac8e0/export</id>
    <title>98cfa7f2-8e46-49ba-891e-aac5024ac8e0</title>
    <updated>2026-10-10T17:07:18.430840+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "98cfa7f2-8e46-49ba-891e-aac5024ac8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117385022806749166", "content": "We have just added an important vulnerability affecting Totolink A3002MU (CVE-2026-105284) https://vuldb.com/vuln/413465", "creation_timestamp": "2026-10-04T22:35:02.553541Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/98cfa7f2-8e46-49ba-891e-aac5024ac8e0/export"/>
    <published>2026-10-04T22:35:02.553541+00:00</published>
  </entry>
</feed>
