CVE-2026-102814
Last modified
CVE-2026-102814 is a high-severity vulnerability rated 8.7/10 on the CVSS scale. An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionality that can lead to operating-system command execution when the TDDP service is running and accessible. Successful exploitation may allow an unauthenticated attacker on the same local area network to execute arbitrary system commands with root privileges.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionality that can lead to operating-system command execution when the TDDP service is running and accessible. Successful exploitation may allow an unauthenticated attacker on the same local area network to execute arbitrary system commands with root privileges.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| TP-Link Systems Inc. | RE305 v3 | < 1.1.8 Build 20260921 Rel. 42853 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-102814?
How severe is CVE-2026-102814?
How do I fix CVE-2026-102814?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-102809PX4 Autopilot through 1.17.0 contains an uncontrolled stack …6.5
- CVE-2026-10281A weakness has been identified in Enderfga claw-orchestrator…7.3
- CVE-2026-102810Marmite through 0.4.2 contains a path traversal vulnerabilit…7.5
- CVE-2026-102811Marmite through 0.4.2 contains missing authentication in the…7.5
- CVE-2026-102812A hard-coded cryptographic key vulnerability exists in the u…6.9
- CVE-2026-102813An authentication flaw exists in the password-recovery funct…6.1
- CVE-2026-102815An operating-system command injection vulnerability exists i…6.9
- CVE-2026-102816An authorization vulnerability exists in the country or regi…5.3
- CVE-2026-10282A security vulnerability has been detected in Bottelet Dayby…5.3
- CVE-2026-102820pageant provides a [PageantStream] type that implements [Asy…6.2
- CVE-2026-102821Russh is a Rust SSH client and server library. Prior to 0.63…6.5
- CVE-2026-102822Russh is a Rust SSH client and server library. Prior to 0.63…3.7
Are you affected by CVE-2026-102814?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST