PT-2026-42832 · Tp Link · Range Extender

Job Jobse · Published 2026-05-22 · Updated 2026-05-23 · CVE-2026-3294

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link range extenders (affected versions not specified)

Description An authentication logic flaw allows an unauthenticated attacker on an adjacent network to reset the administrator password due to insufficient validation of a login parameter. Successful exploitation enables an attacker to gain full administrative control of the device, which may impact confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Missing Authorization

Weakness Enumeration

CWE-20

CWE-862

Related Identifiers

CVE-2026-3294

Affected Products

Range Extender

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2026-3294 · Security Note
• https://tp-link.com/en/support/download/re360/v1/#Firmware · Patch
• https://tp-link.com/en/support/download/re305/v1/#Firmware · Patch
• https://tp-link.com/us/support/download/re360/v1/#Firmware · Patch
• https://tp-link.com/en/support/download/re650/v1/#Firmware · Patch
• https://tp-link.com/en/support/download/tl-wa860re/v4/#Firmware · Patch
• https://tp-link.com/us/support/faq/5101 · Vendor Advisory
• https://tp-link.com/us/support/download/re580d/#Firmware · Patch
• https://tp-link.com/us/support/download/re305/v1/#Firmware · Patch
• https://tp-link.com/en/support/download/re580d/#Firmware · Patch
• https://tp-link.com/us/support/download/tl-wa860re/v4/#Firmware · Patch
• https://tp-link.com/us/support/download/re650/v1/#Firmware · Patch
• https://twitter.com/CVEnew/status/2058155780084580704 · Twitter Post
• https://t.me/CVEtracker/54674 · Telegram Post