CVE-2026-105286 | Totolink A3002MU 1.0.0-B20230403.1455 File Upload /boafrm/formUploadFile sub_44B250 filename path traversal

October 5, 2026 Yanac

A vulnerability was found in Totolink A3002MU 1.0.0-B20230403.1455 and classified as critical. This impacts the function sub_44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal.

This vulnerability is identified as CVE-2026-105286. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More