Totolink a3002mu vulnerabilities

14 CVEs affecting Totolink a3002mu, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-105286, published 2026-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-93742, published 2026-09-19. Critical severity, CVSS 9.9. EPSS: 2.3% chance of exploitation in the next 30 days. A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of the file /boafrm/formWsc. This manipulation of the argument localPin causes…
CVE-2026-93740, published 2026-09-18. Critical severity, CVSS 10.0. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to…
CVE-2026-93739, published 2026-09-18. Critical severity, CVSS 9.9. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to…
CVE-2026-93738, published 2026-09-18. Critical severity, CVSS 9.9. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boafrm/formSchedule. Performing a manipulation of the argument webpage results in…
CVE-2026-90608, published 2026-09-14. Critical severity, CVSS 9.9. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component boa. This manipulation of the argument…
CVE-2026-90607, published 2026-09-14. Critical severity, CVSS 9.9. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument…
CVE-2026-90606, published 2026-09-14. Critical severity, CVSS 9.9. EPSS: 0.9% chance of exploitation in the next 30 days. A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the function formIpv6Setup of the file /boafrm/formIpv6Setup of the component boa. The…
CVE-2026-90605, published 2026-09-14. Critical severity, CVSS 9.9. EPSS: 0.9% chance of exploitation in the next 30 days. A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the component boa. Executing a manipulation…
CVE-2026-6194, published 2026-04-13. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub_410188 of the file /boafrm/formWlanSetup of the component HTTP Request Handler.…
CVE-2026-105284, published 2026-10-05. Critical severity, CVSS 10.0. EPSS: 0.8% chance of exploitation in the next 30 days. A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a…

Latest

CVE-2026-105286, published 2026-10-05. Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub_44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation…
CVE-2026-105285, published 2026-10-05. Critical severity, CVSS 10.0. EPSS: 0.6% chance of exploitation in the next 30 days. A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation…
CVE-2026-93741, published 2026-09-19. Critical severity, CVSS 10.0. EPSS: 0.7% chance of exploitation in the next 30 days. A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument…