← Back to search

CVE-2026-105284

10 CRITICALpublic exploit available

Published 2026-10-05 · Updated 2026-10-06

AI risk analysis

Summary
This vulnerability allows for improper authorization, enabling attackers to bypass authentication checks. It is critical due to the potential for full system compromise.
Exploitability
Exploitation is relatively straightforward given a public exploit. Remote attackers can launch the attack with minimal prerequisites.
Blast radius
If exploited, the impact could be severe, potentially leading to full system compromise and unauthorized access to sensitive data.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to the fixed version 1.0.0-B20230403.1455 or later.
auth-bypassremotecritical

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-266, CWE-285

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.