CVE-2026-102812
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component; an attacker who obtains an affected backup file may extract the cryptographic material from the firmware and decrypt the backup.
Risk Assessment
Sensitive configuration information contained in a backup file may be disclosed, including administrator passwords and Wi-Fi credentials.
Recommendation
Update TP-Link RE305 V3 and Archer C7 V5 firmware to the patched version and protect configuration backup files from unauthorized access.
Other vulnerabilities in TP-Link RE305 V3 / Archer C7 V5
Original NVD description (English source)
A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component. An attacker who obtains an affected configuration backup file may extract the cryptographic material from the firmware and use it to decrypt the backup. Successful exploitation may disclose sensitive configuration information contained in a backup file, including administrator passwords and Wi-Fi credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS