Live › vulnerability › CVE-2026-102815
Go to dashboardThe tmpServer service on the TP-Link RE305 V3 range extender passes crafted requests to the operating system without checking them, so commands run. A local attacker with a low-privileged foothold on the device can send such a request to the TDDPv1 service and run commands as root.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 18:32 UTC. All times on this page are UTC.
Only RE305 V3 range extenders are named. The flaw needs a process on the device, not a remote attacker: the service listens on loopback, so the exposure is a foothold already inside the extender. Home and small-office users who run the RE305 V3 should update; teams that do not run this hardware can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process on the device may submit a crafted request to the TDDPv1 service and execute operating-system commands with root privileges.
Successful exploitation may allow a local attacker with low privileges to obtain root privileges and execute arbitrary operating-system commands on the affected device.
This page as .md · .json · in your agent: get_signal("CVE-2026-102815")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.