There is one official vendor download page for every 10-1000 copies of firmware in open directories, S3 buckets, virustotal, or the vendor’s own update endpoint in a different firmware version you find.
Delete vendor docs too; that’s where you find filename format to search for.
I hate to say this because it goes against everything I believe in. But people are going to need to take down public firmware images for critical infrastructure, like yesterday.