CVE-2026-0834

Katalog CVE

CVSS 8.8 · High EPSS 0,43%

Kerentanan Authentication Bypass by Spoofing pada tp-link archer ax53 firmware, tp-link archer c20 firmware. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability. This issue affects Archer C20 v6.0 < V6_251031, Archer C20 v5 <EU_V5_260317 or < US_V5_260419 Archer AX53 v1.0 < V1_251215 TL-WR841N v13 < 0.9.1 Build 20231120 Rel.62366

Rincian

Terbit di NVD

21 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-290: Authentication Bypass by Spoofing

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 36,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://mattg.systems/posts/cve-2026-0834/ permissions required
• https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware product
• https://www.tp-link.com/en/support/download/archer-c20/v5/#Firmware
• https://www.tp-link.com/en/support/download/archer-c20/v6/#Firmware product
• https://www.tp-link.com/us/support/download/archer-c20/v5/#Firmware
• https://www.tp-link.com/us/support/download/tl-wr841n/v13/#Firmware
• https://www.tp-link.com/us/support/faq/4905/