CVE-2026-3294— Authentication Logic Vulnerability on Multiple TP-Link Range Extenders
Possible ATT&CK Techniques 3AI
T1546.001 · Change Default File Association T1078 · Valid Accounts T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 5
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| TP Link Systems Inc. | Archer RE360 v1 | < V1_20260515 | affected |
| TP-Link Systems Inc. | Archer RE305 v1 | < V1_20260515 | affected |
| TP-Link Systems Inc. | Archer RE650 v1 | < V1_20260429 | affected |
| TP-Link Systems Inc. | RE580D v1 | < V1_20260515 | affected |
| TP-Link Systems Inc. | TL-WA860RE v4 | < V4_20260515 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-3294
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authentication Logic Vulnerability on Multiple TP-Link Range Extenders
Source: NVD (National Vulnerability Database)
Vulnerability Description
An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation. Successful exploitation allows an attacker to obtain full administrative control of the affected device, potentially impacting on confidentiality, integrity, and availability.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
TP-Link多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TP-Link Archer RE650等都是中国普联（TP-Link）公司的产品。TP-Link Archer RE650是一款双频千兆无线信号扩展器。TP-Link Archer RE305是一款双频千兆无线信号扩展器。TP-Link Archer RE360是一款支持双频Wi-Fi扩展的无线中继器。 TP-Link多款产品存在安全漏洞，该漏洞源于认证逻辑问题，可能导致相邻网络上的未认证攻击者操作登录参数并重置管理员密码，从而获得设备的完全管理控制权，影响机密性、完整性和可用性。以下产品受到影响：Ar
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TP-Link Systems Inc. | Archer RE650 v1 | 0 ~ V1_20260429 | - | |
| TP-Link Systems Inc. | Archer RE305 v1 | 0 ~ V1_20260515 | - | |
| TP Link Systems Inc. | Archer RE360 v1 | 0 ~ V1_20260515 | - | |
| TP-Link Systems Inc. | TL-WA860RE v4 | 0 ~ V4_20260515 | - | |
| TP-Link Systems Inc. | RE580D v1 | 0 ~ V1_20260515 | - |
II. Public POCs for CVE-2026-3294
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-3294
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-3294 (1)
Vendor Pages for CVE-2026-3294 (10)
IV. Related Vulnerabilities
Same vendor: TP-Link Systems Inc.
- CVE-2026-11409
OS Command Injection in IPv6 PPPoE Configuration in TP-Link - CVE-2026-11410
OS Command Injection in BigPond Cable (BPA) Configuration in - CVE-2026-6250
Authenticated Format String Injection on TP-Link Tapo C110 - CVE-2026-9151
Command Injection Vulnerability in OpenVPN on Multiple TP-Li - CVE-2026-8913
Command Injection in TP-Link's Archer MR600 WireGuard Client
Same weakness: CWE-20
- CVE-2026-48774
ProxySQL MCP run_sql_readonly executes side-effecting MySQL - CVE-2026-21768
HCL Verse for Android is susceptible to an injection vulnera - CVE-2026-39998
Apache APISIX: Identity Injection via forward-auth Plugin Mi - CVE-2025-58175
GeoServer has a Server-Side Request Forgery (SSRF) Vulnerabi - CVE-2026-12569
Remote Code Execution (RCE) vulnerability in Windchill PDMli
V. Comments for CVE-2026-3294
No comments yet