TI-2026-07641 Aliases CVE-2026-8697 GHSA-f294-r353-6vv8

Improper Authentication Rate Limiting on TP-Link's Archer C64

MEDIUM 40CWE-288Published 2026-05-28 · Updated 2026-05-29

Key facts

Attack vector: Adjacent network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-288.

Summary

Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses the same credentials as the web interface. This enables an attacker to brute-force valid credentials via SSH. Successful exploitation could allow an attacker with adjacent network access to obtain administrative credentials through unrestricted authentication attempts and subsequently gain full administrative access to the device, impacting system confidentiality, integrity, and availability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0051 43rd percentileScored 2026-11-07

Fix Fixed Archer C64 v1.0 (TP-Link Systems Inc.): 1.15.0 Build 250729 Rel.63489n(4555)

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
TP-Link	Archer C64 v1.0	before 1.15.0 Build 250729 Rel.63489n(4555)	1.15.0 Build 250729 Rel.63489n(4555)	Patch available	CNA

Archer C64 v1.0 VendorTP-Link Affected before 1.15.0 Build 250729 Rel.63489n(4555) Fixed in 1.15.0 Build 250729 Rel.63489n(4555) Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:tp-link:archer_c64_firmware:1.15.0:::::::*	1.15.0	Vulnerable	TP-Link
cpe:2.3:h:tp-link:archer_c64:1.0:::::::*	1.0	Running on	TP-Link

cpe:2.3:o:tp-link:archer_c64_firmware:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·TP-Link
cpe:2.3:h:tp-link:archer_c64:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link

Remediation

Fix · CNA Archer C64 v1.0 (TP-Link Systems Inc.) Fixed in 1.15.0 Build 250729 Rel.63489n(4555)

Timeline

2026-10-02 Threatist record created from CVE-2026-8697
2026-10-03 Alias added: GHSA-f294-r353-6vv8

References

Patch 1

https://www.tp-link.com/en/support/download/archer-c64/v1/#Firmware

Advisory 1

https://www.tp-link.com/us/support/faq/5105/

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences