{"vulnerability": "CVE-2026-93742", "sightings": [{"uuid": "3b0d2d69-050d-43d6-9e44-756ad53e530f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93742", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117296884970391917", "content": "Totolink A3002MU routers suffer a CRITICAL (CVSS 9.4) command injection vuln (CVE-2026-93742) in formWsc (/boafrm/formWsc). Public exploit available \u2014 remote compromise risk. Restrict access, monitor devices, patch ASAP. https://radar.offseq.com/threat/cve-2026-93742-command-injection-in-totolink-a3002mu-0eaffbb279ea62b7 #OffSeq #CVE #IoTSecurity", "creation_timestamp": "2026-09-19T09:00:26.582829Z"}, {"uuid": "4bc50acb-4f2a-441f-861e-b52afe7ace84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93742", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvuczs6ctn2p", "content": "Totolink A3002MU faces a CRITICAL command injection flaw (CVE-2026-93742, CVSS 9.4). Remote attackers can exploit this \u2014 public exploit exists. Restrict access & monitor for compromise. https://radar.offseq.com/threat/cve-2026-93742-command-injection-in-totolink-a3002mu-0eaffbb279ea62b7 #OffSeq #...", "creation_timestamp": "2026-09-19T09:00:28.549428Z"}, {"uuid": "082bd193-a18a-4986-a3fd-2822326c5585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93742", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvujuhyv3j2m", "content": "CVE-2026-93742 - Unpatched Command Injection in Totolink A3002MU routers enables remote RCE. Public exploit released. CVSS 9.9. Isolate devices now. #CVE #Totolink #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-93742/", "creation_timestamp": "2026-09-19T11:02:45.543358Z"}, {"uuid": "229c0219-9822-4342-a50e-0edae50b2df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93742", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117297366003413259", "content": "CVE-2026-93742 - Unpatched Command Injection in Totolink A3002MU routers enables remote RCE. Public exploit released. CVSS 9.9. Isolate devices now. #CVE #Totolink #infosec\nhttps://www.valtersit.com/cve/CVE-2026-93742/", "creation_timestamp": "2026-09-19T11:02:47.116851Z"}, {"uuid": "b8bb7256-2395-4eab-ad99-c8b1ee017c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93742", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7aygrc2w4jv6r", "content": "CVE-2026-93742 - Totolink A3002MU formWsc command injection\nCVE ID : CVE-2026-93742\n \n Published : Sept. 19, 2026, 9:16 a.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function f...", "creation_timestamp": "2026-09-19T11:13:34.347510Z"}, {"uuid": "87d7578e-8285-4814-a656-70233382d776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93742", "type": "seen", "source": "https://gist.github.com/ichintu/9cb86acb682c54ea7f3ed1ba71a63335", "content": "This daily threat intelligence roundup highlights critical software vulnerabilities and emerging AI security risks. Key traditional threats include unauthenticated RCEs in SolarWinds Access Rights Manager (CVE-2026-28326, patched), Orkes Conductor (CVE-2026-58138, actively exploited), and a critical command injection flaw in Totolink routers (CVE-2026-93742, public exploit). A high-severity authenticated RCE also affects The Welcomizer WordPress plugin (CVE-2026-4327). On the AI front, Google\u2019s Gemini model accidentally breached real corporate systems during a May 2026 security test due to a domain mix-up, while industry discussions emphasize that prompt injection and LLM routing flaws have become primary security challenges in AI agent development. Collectively, the reports underscore a threat landscape defined by high-impact software exploits and rapidly evolving AI vulnerabilities.", "creation_timestamp": "2026-09-19T12:02:14.786489Z"}, {"uuid": "073162be-951e-4916-a6ed-6e44c06364fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93742", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvutzsu4vq2r", "content": "\ud83d\udd34 CVE-2026-93742 - Critical (9.9)\n\nA weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93742/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T14:04:43.448066Z"}]}