Live › vulnerability › CVE-2026-102814
Go to dashboardThe TP-Link RE305 V3 range extender's TDDP v2 management service uses a fixed, derivable cryptographic key, so forged protocol packets are accepted. An unauthenticated attacker on the same local network can reach privileged TDDP operations and run arbitrary system commands as root.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 18:32 UTC. All times on this page are UTC.
Owners of TP-Link RE305 V3 range extenders where the TDDP v2 service is running and reachable from the same local network. The sources do not describe a default-off setting, so assume any network with an exposed device is at risk. Systems that do not run this device or whose LAN does not include an untrusted party can deprioritise it.
No product ranges from the sources yet.
unknown.unknown.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionality that can lead to operating-system command execution when the TDDP service is running and accessible.
Successful exploitation may allow an unauthenticated attacker on the same local area network to execute arbitrary system commands with root privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-102814")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.