CVE-2026-3294
8.7
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow more
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: f23511db-6c3e-4e32-a477-6aa17d310630 (Secondary)
Description
An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation.
Successful exploitation allows an attacker to obtain full administrative control of the affected device, potentially impacting on confidentiality, integrity, and availability.
Affected (5)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 20260515 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Re305 | Version 1.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 20260515 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Re360 | Version 1.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 20260515 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Re580d | Version 1.0 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 20260429 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Re650 | Version 1.0 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 20260515 |
| Running on/with | Platform Versions |
|---|---|
Tp Link Tl Wa860re | Version 4.0 |
Related CWEs
CWE-20
Improper Input Validation
The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly.
CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
References (11)
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Product
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Vendor Advisory
Timeline
No history available yet.