CVE-2026-102813

An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger generation of an administrator password-reset verification code. Because the interface lacks an effective attempt counter or lockout mechanism and uses a predictable verification-code generation process, an attacker may obtain or brute-force the code and reset the administrator password.  Successful exploitation may allow an unauthenticated attacker on the local network to reset the administrator password and subsequently access privileged device-management functions.

• CWE-338

• https://www.tp-link.com/en/support/download/re305/v3/#Firmware
• https://www.tp-link.com/us/support/download/re305/v3/#Firmware
• https://www.tp-link.com/us/support/faq/5362/

Published

Oct 27, 2026

Last Modified

Oct 28, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102808PX4 Autopilot through 1.17.0 contains a NULL pointer derefer…6.5
• CVE-2026-102809PX4 Autopilot through 1.17.0 contains an uncontrolled stack …6.5
• CVE-2026-10281A weakness has been identified in Enderfga claw-orchestrator…7.3
• CVE-2026-102810Marmite through 0.4.2 contains a path traversal vulnerabilit…7.5
• CVE-2026-102811Marmite through 0.4.2 contains missing authentication in the…7.5
• CVE-2026-102812A hard-coded cryptographic key vulnerability exists in the u…6.9
• CVE-2026-102814An authentication weakness exists in the TP-Link TDDP v2 ser…8.7
• CVE-2026-102815An operating-system command injection vulnerability exists i…6.9
• CVE-2026-102816An authorization vulnerability exists in the country or regi…5.3
• CVE-2026-10282A security vulnerability has been detected in Bottelet Dayby…5.3
• CVE-2026-102820pageant provides a [PageantStream] type that implements [Asy…6.2
• CVE-2026-102821Russh is a Rust SSH client and server library. Prior to 0.63…6.5