<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 10 Oct 2026 08:26:31 +0000</lastBuildDate>
    <item>
      <title>e106b3ca-7082-49d1-a9c3-351b526fe359</title>
      <link>https://vulnerability.circl.lu/sighting/e106b3ca-7082-49d1-a9c3-351b526fe359/export</link>
      <description>{"uuid": "e106b3ca-7082-49d1-a9c3-351b526fe359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcbqx7gni2l", "content": "CVE-2026-105284 - a3002mu\nThe Totolink A3002MU router has a flaw in its login check that could let someone bypass authentication. An attacker could exploit this from anywhere on the internet to gain access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#a3002mu #totolink #CVE #infosec", "creation_timestamp": "2026-10-07T15:40:05.205577Z"}</description>
      <content:encoded>{"uuid": "e106b3ca-7082-49d1-a9c3-351b526fe359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcbqx7gni2l", "content": "CVE-2026-105284 - a3002mu\nThe Totolink A3002MU router has a flaw in its login check that could let someone bypass authentication. An attacker could exploit this from anywhere on the internet to gain access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#a3002mu #totolink #CVE #infosec", "creation_timestamp": "2026-10-07T15:40:05.205577Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e106b3ca-7082-49d1-a9c3-351b526fe359/export</guid>
      <pubDate>Wed, 07 Oct 2026 15:40:05 +0000</pubDate>
    </item>
    <item>
      <title>dcee81c7-13d4-4978-9b44-0910245d4b89</title>
      <link>https://vulnerability.circl.lu/sighting/dcee81c7-13d4-4978-9b44-0910245d4b89/export</link>
      <description>{"uuid": "dcee81c7-13d4-4978-9b44-0910245d4b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "published-proof-of-concept", "source": "Telegram/zC7t4Lx05uyfmCVlTGAKrLAcTODowFQbx3kd_6HhY1YAH_E", "content": "", "creation_timestamp": "2026-10-05T15:00:22.000000Z"}</description>
      <content:encoded>{"uuid": "dcee81c7-13d4-4978-9b44-0910245d4b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "published-proof-of-concept", "source": "Telegram/zC7t4Lx05uyfmCVlTGAKrLAcTODowFQbx3kd_6HhY1YAH_E", "content": "", "creation_timestamp": "2026-10-05T15:00:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dcee81c7-13d4-4978-9b44-0910245d4b89/export</guid>
      <pubDate>Mon, 05 Oct 2026 15:00:22 +0000</pubDate>
    </item>
    <item>
      <title>cc0fcace-8699-4a6b-aadc-3b2ecb6d0a1e</title>
      <link>https://vulnerability.circl.lu/sighting/cc0fcace-8699-4a6b-aadc-3b2ecb6d0a1e/export</link>
      <description>{"uuid": "cc0fcace-8699-4a6b-aadc-3b2ecb6d0a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105284", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx4uki526t2x", "content": "Totolink A3002MU (v1.0.0-B20230403.1455) faces CRITICAL CVE-2026-105284 (CVSS 10): remote auth bypass due to improper authorization. Public exploit out. Restrict device access &amp;amp; check for updates. https://radar.offseq.com/threat/cve-2026-105284-improper-authorization-in-totolink-a3002mu-1d61e5880...", "creation_timestamp": "2026-10-05T12:00:31.726561Z"}</description>
      <content:encoded>{"uuid": "cc0fcace-8699-4a6b-aadc-3b2ecb6d0a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105284", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx4uki526t2x", "content": "Totolink A3002MU (v1.0.0-B20230403.1455) faces CRITICAL CVE-2026-105284 (CVSS 10): remote auth bypass due to improper authorization. Public exploit out. Restrict device access &amp;amp; check for updates. https://radar.offseq.com/threat/cve-2026-105284-improper-authorization-in-totolink-a3002mu-1d61e5880...", "creation_timestamp": "2026-10-05T12:00:31.726561Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cc0fcace-8699-4a6b-aadc-3b2ecb6d0a1e/export</guid>
      <pubDate>Mon, 05 Oct 2026 12:00:31 +0000</pubDate>
    </item>
    <item>
      <title>38df0c08-2d38-4a41-85d9-a7083d020a6f</title>
      <link>https://vulnerability.circl.lu/sighting/38df0c08-2d38-4a41-85d9-a7083d020a6f/export</link>
      <description>{"uuid": "38df0c08-2d38-4a41-85d9-a7083d020a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105284", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117388189935603535", "content": "Totolink A3002MU (v1.0.0-B20230403.1455) hit by CRITICAL CVE-2026-105284 \u2014 improper auth in /bin/boa (CVSS 10). Remote attackers can bypass auth; public exploit exists. Restrict admin access, monitor vendor. https://radar.offseq.com/threat/cve-2026-105284-improper-authorization-in-totolink-a3002mu-1d61e588042247d2 #OffSeq #CVE2026105284 #IoTSecurity", "creation_timestamp": "2026-10-05T12:00:30.122499Z"}</description>
      <content:encoded>{"uuid": "38df0c08-2d38-4a41-85d9-a7083d020a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105284", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117388189935603535", "content": "Totolink A3002MU (v1.0.0-B20230403.1455) hit by CRITICAL CVE-2026-105284 \u2014 improper auth in /bin/boa (CVSS 10). Remote attackers can bypass auth; public exploit exists. Restrict admin access, monitor vendor. https://radar.offseq.com/threat/cve-2026-105284-improper-authorization-in-totolink-a3002mu-1d61e588042247d2 #OffSeq #CVE2026105284 #IoTSecurity", "creation_timestamp": "2026-10-05T12:00:30.122499Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/38df0c08-2d38-4a41-85d9-a7083d020a6f/export</guid>
      <pubDate>Mon, 05 Oct 2026 12:00:30 +0000</pubDate>
    </item>
    <item>
      <title>915be7dc-1c89-446a-a55d-bc081a7ab3fb</title>
      <link>https://vulnerability.circl.lu/sighting/915be7dc-1c89-446a-a55d-bc081a7ab3fb/export</link>
      <description>{"uuid": "915be7dc-1c89-446a-a55d-bc081a7ab3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx4rcbk7q22e", "content": "\ud83d\udd34 CVE-2026-105284 - Critical (10)\n\nA weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105284/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T11:02:14.872970Z"}</description>
      <content:encoded>{"uuid": "915be7dc-1c89-446a-a55d-bc081a7ab3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx4rcbk7q22e", "content": "\ud83d\udd34 CVE-2026-105284 - Critical (10)\n\nA weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105284/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T11:02:14.872970Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/915be7dc-1c89-446a-a55d-bc081a7ab3fb/export</guid>
      <pubDate>Mon, 05 Oct 2026 11:02:14 +0000</pubDate>
    </item>
    <item>
      <title>98a1346e-e650-4fdd-a36c-c6b5d5125979</title>
      <link>https://vulnerability.circl.lu/sighting/98a1346e-e650-4fdd-a36c-c6b5d5125979/export</link>
      <description>{"uuid": "98a1346e-e650-4fdd-a36c-c6b5d5125979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx4oaggxhk2l", "content": "\ud83d\udea8 CVE-2026-105284 \u2014 CVSS 9.3 CRITICAL\n\nA weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the functi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105284\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T10:07:30.834147Z"}</description>
      <content:encoded>{"uuid": "98a1346e-e650-4fdd-a36c-c6b5d5125979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx4oaggxhk2l", "content": "\ud83d\udea8 CVE-2026-105284 \u2014 CVSS 9.3 CRITICAL\n\nA weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the functi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105284\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T10:07:30.834147Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/98a1346e-e650-4fdd-a36c-c6b5d5125979/export</guid>
      <pubDate>Mon, 05 Oct 2026 10:07:30 +0000</pubDate>
    </item>
    <item>
      <title>98cfa7f2-8e46-49ba-891e-aac5024ac8e0</title>
      <link>https://vulnerability.circl.lu/sighting/98cfa7f2-8e46-49ba-891e-aac5024ac8e0/export</link>
      <description>{"uuid": "98cfa7f2-8e46-49ba-891e-aac5024ac8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117385022806749166", "content": "We have just added an important vulnerability affecting Totolink A3002MU (CVE-2026-105284) https://vuldb.com/vuln/413465", "creation_timestamp": "2026-10-04T22:35:02.553541Z"}</description>
      <content:encoded>{"uuid": "98cfa7f2-8e46-49ba-891e-aac5024ac8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117385022806749166", "content": "We have just added an important vulnerability affecting Totolink A3002MU (CVE-2026-105284) https://vuldb.com/vuln/413465", "creation_timestamp": "2026-10-04T22:35:02.553541Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/98cfa7f2-8e46-49ba-891e-aac5024ac8e0/export</guid>
      <pubDate>Sun, 04 Oct 2026 22:35:02 +0000</pubDate>
    </item>
  </channel>
</rss>
