Mmastodon TechnologyCybersecurity first seen 10 h ago, last 10 h ago, peak #8

Critical RCE flaw disclosed in Totolink A3002MU router

Original: Totolink A3002MU (v1.0.0-B20230403.1455) hit by CRITICAL stack buffer overflow (CVE-2026-105285). Remote, unauthenticate

A critical stack buffer overflow, tracked as CVE-2026-105285, has been disclosed in the Totolink A3002MU router running firmware v1.0.0-B20230403.1455. The flaw allows remote, unauthenticated attackers to execute arbitrary code, and a public exploit is already available. Security researchers are urging users to restrict management access to affected devices while awaiting a patch.

Why now: A public exploit for a critical unauthenticated remote code execution bug in a widely used consumer router is circulating, raising immediate risk of mass attacks.

TotolinkA3002MUCVE-2026-105285

Open on mastodon →

Evidence

• Totolink A3002MU (v1.0.0-B20230403.1455) hit by CRITICAL stack buffer overflow (CVE-2026-105285). Remote, unauthenticated RCE possible; public exploit out. Restrict management access. https:// radar.offseq.com/threat/cve-20… · offseq@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/1100802