CVE-2026-3294

Katalog CVE

CVSS 8.8 · High EPSS 0,57%

Kerentanan Improper Input Validation pada tp-link re305 firmware, tp-link re360 firmware +3 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation. Successful exploitation allows an attacker to obtain full administrative control of the affected device, potentially impacting on confidentiality, integrity, and availability.

Rincian

Terbit di NVD

22 Mei 2026

Terakhir diubah

23 Juli 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-862: Missing Authorization

EPSS (30 hari)

0,57% peluang dieksploitasi; lebih tinggi dari 45,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.tp-link.com/us/support/faq/5101/ advisory vendor
• https://www.tp-link.com/en/support/download/re305/v1/#Firmware product
• https://www.tp-link.com/en/support/download/re360/v1/#Firmware product
• https://www.tp-link.com/en/support/download/re580d/#Firmware product
• https://www.tp-link.com/en/support/download/re650/v1/#Firmware product
• https://www.tp-link.com/en/support/download/tl-wa860re/v4/#Firmware product
• https://www.tp-link.com/us/support/download/re305/v1/#Firmware product
• https://www.tp-link.com/us/support/download/re360/v1/#Firmware product
• https://www.tp-link.com/us/support/download/re580d/#Firmware product
• https://www.tp-link.com/us/support/download/re650/v1/#Firmware product
• https://www.tp-link.com/us/support/download/tl-wa860re/v4/#Firmware product