CVE-2026-18330
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. The same RSA-1024 private key is stored within firmware configuration files and reused across devices, allowing an attacker who obtains the key and captures an HTTP Web UI login session to decrypt the administrator password.
Risk Assessment
Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality.
Recommendation
Update TP-Link RE305 V3 and Archer C7 V5 firmware to a patched version and enforce HTTPS-only access to the Web UI.
Other vulnerabilities in TP-Link RE305 V3 / Archer C7 V5
Original NVD description (English source)
A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. The same RSA-1024 private key is stored within firmware configuration files and reused across devices. An attacker who obtains the private key and captures an HTTP Web UI login session may use the key to decrypt the administrator password. Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS