CVE-2026-102812 Details
Description
A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component. An attacker who obtains an affected configuration backup file may extract the cryptographic material from the firmware and use it to decrypt the backup. Successful exploitation may disclose sensitive configuration information contained in a backup file, including administrator passwords and Wi-Fi credentials.
A vulnerability exists in TP-Link RE305 V3 and Archer C7 V5 due to a hard-coded AES-128 key and initialization vector embedded in the firmware's configuration management component. This vulnerability affects the user-configuration backup mechanism, allowing an attacker who obtains a configuration backup file to extract the cryptographic material and decrypt the backup. Successful exploitation could disclose sensitive configuration information, including administrator passwords and Wi-Fi credentials.
Users are advised to update to the latest firmware version. The patched version for Archer C7 V5 is 1.3.1 Build 260821, and for RE305 V3, it is 1.1.8 Build 261010. Instructions for downloading the firmware are available on the TP-Link support website.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 27, 2026CISA-ADP
Assessed Nov 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.tp-link.com/en/support/download/archer-c7/v5/#Firmware | TPLink | ProductVendor |
| https://www.tp-link.com/en/support/download/re305/v3/#Firmware | TPLink | ProductVendor |
| https://www.tp-link.com/us/support/download/archer-c7/v5/#Firmware | TPLink | ProductVendor |
| https://www.tp-link.com/us/support/download/re305/v3/#Firmware | TPLink | ProductVendor |
| https://www.tp-link.com/us/support/faq/5362/ | TPLink | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-321 | Use of Hard-coded Cryptographic Key | TPLink |
Affected Products
| Product | Versions |
|---|---|
| TP-Link RE305 | < 1.1.8 Build 20260921 |
CPE
Remediation
| |
| TP-Link Archer C7 | < 1.3.1 Build 20260821 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 4, 2026 | CVE Modified | CISA-ADP |
| Oct 27, 2026 | New CVE Received | TPLink |