CVE-2026-105285

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entry_name leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

  • Published Oct 5, 2026
  • CVSS 9.3 critical
  • 1.1% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-105285 at the National Vulnerability Database