Medium severity · published Oct 5, 2026
CVE-2026-105286
Totolink A3002MU File Upload formUploadFile sub_44B250 path traversal
6.3
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub_44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit is now public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A3
A3002MU · Totolink
1.0.0-B20230403.1455 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-105286
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-105286
vdb-entry
https://vuldb.com/vuln/413467
signature
https://vuldb.com/vuln/413467/cti
third-party-advisory
https://vuldb.com/cve/CVE-2026-105286
third-party-advisory
https://vuldb.com/submit/977225
exploit
https://gist.github.com/H3rmesk1t/b107cde70392e0aff26e8219bae1a181
product
https://www.totolink.net/
More from A3002MU
10.0
CVE-2026-105285
Totolink A3002MU QoS Rule formIpQoS stack-based overflow
10.0
CVE-2026-105284
Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization
10.0
CVE-2026-93741
Totolink A3002MU formWlWds buffer overflow
10.0
CVE-2026-93740
Totolink A3002MU formWlEncrypt buffer overflow
9.9
CVE-2026-93742
Totolink A3002MU formWsc command injection