Live › vulnerability › CVE-2026-102812
Go to dashboardTP-Link RE305 V3 and Archer C7 V5 firmware embeds a fixed AES-128 key and IV for encrypting user configuration backups. An attacker who gets a backup file can extract the key from firmware and decrypt it, exposing admin passwords and Wi-Fi credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 18:32 UTC. All times on this page are UTC.
Owners of TP-Link RE305 V3 and Archer C7 V5 devices are affected, since the flaw is in the firmware itself. The risk requires that someone obtains a backup file, so exposure of backups in shared storage or cloud folders raises the concern. Teams that do not run these models can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component. An attacker who obtains an affected configuration backup file may extract the cryptographic material from the firmware and use it to decrypt the backup.
Successful exploitation may disclose sensitive configuration information contained in a backup file, including administrator passwords and Wi-Fi credentials.
This page as .md · .json · in your agent: get_signal("CVE-2026-102812")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.