CVE-2026-102813 Details
Description
An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger generation of an administrator password-reset verification code. Because the interface lacks an effective attempt counter or lockout mechanism and uses a predictable verification-code generation process, an attacker may obtain or brute-force the code and reset the administrator password. Successful exploitation may allow an unauthenticated attacker on the local network to reset the administrator password and subsequently access privileged device-management functions.
A vulnerability exists in the password recovery feature of the TP-Link RE305 V3 range extender. The verification-code interface allows an unauthenticated attacker on the same local network to generate a password-reset verification code for the administrator account. This vulnerability arises because the interface does not have a proper attempt counter or lockout mechanism and relies on a predictable code generation process. As a result, an attacker could either obtain the code or brute-force it to reset the administrator password. Exploiting this vulnerability could enable the attacker to access privileged device management functions.
Users are advised to update to the latest firmware version, which is available on the TP-Link official website. The latest version for the RE305 V3 is 1.1.8 Build 261010, released on October 22, 2026.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 27, 2026CISA-ADP
Assessed Nov 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.tp-link.com/en/support/download/re305/v3/#Firmware | TPLink | ProductVendor |
| https://www.tp-link.com/us/support/download/re305/v3/#Firmware | TPLink | ProductVendor |
| https://www.tp-link.com/us/support/faq/5362/ | TPLink | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-338 | Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | TPLink |
Affected Products
| Product | Versions |
|---|---|
| TP-Link RE305 | >= 1.1.4, < 1.1.8 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 4, 2026 | CVE Modified | CISA-ADP |
| Oct 27, 2026 | New CVE Received | TPLink |