Vulnerability · Published Oct 5, 2026 · Assigned by VulDB

CVE-2026-105285Totolink A3002MU QoS Rule formIpQoS stack-based overflow

Critical 10.0

In plain English

A critical-severity stack buffer overflow in A3002MU from Totolink. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)0.6%top 48.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entry_name leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Affected products (as reported)

Vendor	Product	Versions
Totolink	A3002MU	1.0.0-B20230403.1455

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-413466 | Totolink A3002MU QoS Rule formIpQoS stack-based overflow vdb-entry, technical-description
VDB-413466 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-105285 | CVE Analysis and Report third-party-advisory
Submit #977224 | TOTOLINK A3002MU V1.0.0-B20230403.1455 Stack-based Buffer Overflow third-party-advisory
https://gist.github.com/H3rmesk1t/b68352b011bc2825adc85cf336c25dfb exploit
https://www.totolink.net/ product