{"vulnerability": "cve-2026-105284", "sightings": [{"uuid": "98cfa7f2-8e46-49ba-891e-aac5024ac8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117385022806749166", "content": "We have just added an important vulnerability affecting Totolink A3002MU (CVE-2026-105284) https://vuldb.com/vuln/413465", "creation_timestamp": "2026-10-04T22:35:02.553541Z"}, {"uuid": "98a1346e-e650-4fdd-a36c-c6b5d5125979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx4oaggxhk2l", "content": "\ud83d\udea8 CVE-2026-105284 \u2014 CVSS 9.3 CRITICAL\n\nA weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the functi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105284\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T10:07:30.834147Z"}, {"uuid": "915be7dc-1c89-446a-a55d-bc081a7ab3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx4rcbk7q22e", "content": "\ud83d\udd34 CVE-2026-105284 - Critical (10)\n\nA weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105284/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T11:02:14.872970Z"}, {"uuid": "38df0c08-2d38-4a41-85d9-a7083d020a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105284", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117388189935603535", "content": "Totolink A3002MU (v1.0.0-B20230403.1455) hit by CRITICAL CVE-2026-105284 \u2014 improper auth in /bin/boa (CVSS 10). Remote attackers can bypass auth; public exploit exists. Restrict admin access, monitor vendor. https://radar.offseq.com/threat/cve-2026-105284-improper-authorization-in-totolink-a3002mu-1d61e588042247d2 #OffSeq #CVE2026105284 #IoTSecurity", "creation_timestamp": "2026-10-05T12:00:30.122499Z"}, {"uuid": "cc0fcace-8699-4a6b-aadc-3b2ecb6d0a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105284", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx4uki526t2x", "content": "Totolink A3002MU (v1.0.0-B20230403.1455) faces CRITICAL CVE-2026-105284 (CVSS 10): remote auth bypass due to improper authorization. Public exploit out. Restrict device access &amp; check for updates. https://radar.offseq.com/threat/cve-2026-105284-improper-authorization-in-totolink-a3002mu-1d61e5880...", "creation_timestamp": "2026-10-05T12:00:31.726561Z"}, {"uuid": "dcee81c7-13d4-4978-9b44-0910245d4b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "published-proof-of-concept", "source": "Telegram/zC7t4Lx05uyfmCVlTGAKrLAcTODowFQbx3kd_6HhY1YAH_E", "content": "", "creation_timestamp": "2026-10-05T15:00:22.000000Z"}, {"uuid": "e106b3ca-7082-49d1-a9c3-351b526fe359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105284", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcbqx7gni2l", "content": "CVE-2026-105284 - a3002mu\nThe Totolink A3002MU router has a flaw in its login check that could let someone bypass authentication. An attacker could exploit this from anywhere on the internet to gain access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#a3002mu #totolink #CVE #infosec", "creation_timestamp": "2026-10-07T15:40:05.205577Z"}]}