A3002MU
- Software type
- Network device
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, A3002MU recorded 13 security vulnerabilities in the last 90 days, of which 11 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of A3002MU and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-105286Totolink A3002MU File Upload formUploadFile sub_44B250 path traversalCVE-2026-105285Totolink A3002MU QoS Rule formIpQoS stack-based overflowCVE-2026-105284Totolink A3002MU Authentication Check boa sub_40FCFC improper authorizationCVE-2026-93742Totolink A3002MU formWsc command injectionCVE-2026-93741Totolink A3002MU formWlWds buffer overflow| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-105286Totolink A3002MU File Upload formUploadFile sub_44B250 path traversal | Exploitation statusActively exploited | FixNo |
| SeverityMedium |
CVE-2026-105285Totolink A3002MU QoS Rule formIpQoS stack-based overflow | Exploitation statusActively exploited | FixNo | Published10/05/2026 | SeverityCritical |
|---|
CVE-2026-105284Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization | Exploitation statusActively exploited | FixNo | Published10/05/2026 | SeverityCritical |
|---|
CVE-2026-93742Totolink A3002MU formWsc command injection | Exploitation statusActively exploited | FixNo | Published09/19/2026 | SeverityCritical |
|---|
CVE-2026-93741Totolink A3002MU formWlWds buffer overflow | Exploitation statusActively exploited | FixNo | Published09/19/2026 | SeverityCritical |
|---|
CVE-2026-93740Totolink A3002MU formWlEncrypt buffer overflow | Exploitation statusActively exploited | FixNo | Published09/18/2026 | SeverityCritical |
|---|
CVE-2026-93739Totolink A3002MU formWlAc buffer overflow | Exploitation statusActively exploited | FixNo | Published09/18/2026 | SeverityCritical |
|---|
CVE-2026-93738Totolink A3002MU formSchedule buffer overflow | Exploitation statusActively exploited | FixNo | Published09/18/2026 | SeverityCritical |
|---|
CVE-2026-90608Totolink A3002MU boa formPortFw buffer overflow | Exploitation statusActively exploited | FixNo | Published09/14/2026 | SeverityCritical |
|---|
CVE-2026-90607Totolink A3002MU boa formNewSchedule buffer overflow | Exploitation statusActively exploited | FixNo | Published09/14/2026 | SeverityCritical |
|---|
CVE-2026-90606Remote Buffer Overflow in the Totolink A3002MU Management Interface | Exploitation statusActively exploited | FixNo | Published09/13/2026 | SeverityCritical |
|---|
CVE-2026-90605Totolink A3002MU boa formFilter buffer overflow | Exploitation statusActively exploited | FixNo | Published09/13/2026 | SeverityCritical |
|---|
CVE-2026-90604Totolink A3002MU Anchor Tag cross site scripting | Exploitation statusActively exploited | FixNo | Published09/13/2026 | SeverityMedium |
|---|
CVE-2026-6194Totolink A3002MU HTTP Request formWlanSetup sub_410188 stack-based overflow | Exploitation statusActively exploited | FixNo | Published04/13/2026 | SeverityHigh |
|---|
14 Results | Page 1 of 1