A hard-coded
cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5.
The same RSA-1024 private key is stored within firmware configuration files and
reused across devices. An attacker who obtains the private key and captures an
HTTP Web UI login session may use the key to decrypt the administrator
password.
Successful
exploitation may disclose the administrator password captured from an HTTP
login session and compromise session confidentiality.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Tp-link |
|
No data.
No data.
References
History
Tue, 27 Oct 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Tue, 27 Oct 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to compromise session confidentiality. Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality. | A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. The same RSA-1024 private key is stored within firmware configuration files and reused across devices. An attacker who obtains the private key and captures an HTTP Web UI login session may use the key to decrypt the administrator password. Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality. |
| Title | Hardcoded Shared RSA-1024 Private Key in TP-Link Archer AX55 v4 | Hardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7 |
| References |
|
|
Fri, 04 Sep 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Fri, 04 Sep 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Tp-link
Tp-link archer Ax55 V4 |
|
| Vendors & Products |
Tp-link
Tp-link archer Ax55 V4 |
Thu, 03 Sep 2026 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to compromise session confidentiality. Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality. | |
| Title | Hardcoded Shared RSA-1024 Private Key in TP-Link Archer AX55 v4 | |
| Weaknesses | CWE-321 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: TPLink
Published: 2026-09-03T22:24:45.430Z
Updated: 2026-10-27T17:39:53.630Z
Reserved: 2026-07-29T20:03:53.524Z
Link: CVE-2026-18330
Vulnrichment
Updated: 2026-09-04T17:39:53.006Z
NVD
Status : Deferred
Published: 2026-09-03T23:17:19.400
Modified: 2026-10-27T18:17:37.207
Link: CVE-2026-18330
Redhat
No data.