Live › vulnerability › CVE-2026-102813
Go to dashboardThe password-recovery interface on the TP-Link RE305 V3 range extender generates administrator reset codes predictably and has no effective attempt limit or lockout. An unauthenticated attacker on the same local network can guess or brute-force the code, reset the admin password, and then control device management.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 18:32 UTC. All times on this page are UTC.
Owners of TP-Link RE305 V3 range extenders where the password-recovery function is reachable from the local network. Devices that are not on the RE305 V3 model or are patched with the fixed firmware are not affected. The sources do not state whether remote or cloud-managed access changes exposure, so that is unknown.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger generation of an administrator password-reset verification code. Because the interface lacks an effective attempt counter or lockout mechanism and uses a predictable verification-code generation process, an attacker may obtain or brute-force the code and reset the administrator password.
Successful exploitation may allow an unauthenticated attacker on the local network to reset the administrator password and subsequently access privileged device-management functions.
This page as .md · .json · in your agent: get_signal("CVE-2026-102813")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.