CVE-2026-102814 Details
Description
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionality that can lead to operating-system command execution when the TDDP service is running and accessible. Successful exploitation may allow an unauthenticated attacker on the same local area network to execute arbitrary system commands with root privileges.
An authentication weakness in the TP-Link TDDP v2 service of the RE305 V3 model allows unauthenticated attackers on the same local network to forge protocol packets and access privileged TDDP operations. This vulnerability can lead to execution of arbitrary system commands with root privileges, especially when the TDDP service is running and accessible.
Users are advised to update to the latest firmware version, which is available on the TP-Link official website. The latest version for the RE305 V3 is 1.1.8 Build 261010, released on October 22, 2026.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 27, 2026CISA-ADP
Assessed Oct 29, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.tp-link.com/en/support/download/re305/v3/#Firmware | TPLink | ProductVendor |
| https://www.tp-link.com/us/support/download/re305/v3/#Firmware | TPLink | ProductVendor |
| https://www.tp-link.com/us/support/faq/5362/ | TPLink | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | TPLink |
Affected Products
| Product | Versions |
|---|---|
| TP-Link RE305 | >= 1.1.4, < 1.1.8 (semver) |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 29, 2026 | CVE Modified | CISA-ADP |
| Oct 29, 2026 | CVE Modified | CISA-ADP |
| Oct 27, 2026 | New CVE Received | TPLink |