CVE-2026-105285 | Totolink A3002MU 1.0.0-B20230403.1455 QoS Rule /boafrm/formIpQoS addQos/comment/entry_name stack-based overflow

October 5, 2026 Yanac

A vulnerability has been found in Totolink A3002MU 1.0.0-B20230403.1455 and classified as very critical. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entry_name leads to stack-based buffer overflow.

This vulnerability is referenced as CVE-2026-105285. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More