Vulnerabilities

TI-2026-81495 CVE-2026-102816 · GHSA-7gfj-r5h8-6w5v

Unauthenticated wireless regulatory region change in TP-Link RE305

LOW 23

An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00168 Published 2026-10-27 Fixed in 1.1.8 Build 20260921 Rel. 42853 CWE-306

TI-2026-81494 CVE-2026-102815 · GHSA-x9gf-gx28-57pq

Command injection in TP-Link RE305 tmpServer grants root access

LOW 33

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3.

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00598 Published 2026-10-27 Fixed in 1.1.8 Build 20260921 Rel. 42853 CWE-78

TI-2026-81493 CVE-2026-102814 · GHSA-7pqg-m5f8-c886

Authentication weakness in TP-Link RE305 TDDP v2 allows root command execution

MEDIUM 40

An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.0036 Published 2026-10-27 Fixed in 1.1.8 Build 20260921 Rel. 42853 CWE-78

TI-2026-81492 CVE-2026-102813 · GHSA-9q5p-8p59-jhwp

Weak reset code lets attackers reset TP-Link RE305 admin password

LOW 27

An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3.

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00198 Published 2026-10-27 Fixed in 1.1.8 Build 20260921 Rel. 42853 CWE-338

TI-2026-81491 CVE-2026-102812 · GHSA-xgv8-3vj8-53q7

Hard-coded AES key in TP-Link RE305 and Archer C7 backup encryption

LOW 29

A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.0012 Published 2026-10-27 Fixed in 1.1.8 Build 20260921 Rel. 42853, 1.3.1 Build 20260821 Rel. 41256 CWE-321