CVE-2026-102816
Last modified
CVE-2026-102816 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory region and force the device to reapply its wireless configuration. Successful exploitation may cause wireless connection interruptions, unavailable channels, client disconnections, or wireless service instability, and may cause the device to apply parameters intended for a different regulatory region.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory region and force the device to reapply its wireless configuration. Successful exploitation may cause wireless connection interruptions, unavailable channels, client disconnections, or wireless service instability, and may cause the device to apply parameters intended for a different regulatory region.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| TP-Link Systems Inc. | RE305 v3 | < 1.1.8 Build 20260921 Rel. 42853 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-102816?
How severe is CVE-2026-102816?
How do I fix CVE-2026-102816?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-102810Marmite through 0.4.2 contains a path traversal vulnerabilit…7.5
- CVE-2026-102811Marmite through 0.4.2 contains missing authentication in the…7.5
- CVE-2026-102812A hard-coded cryptographic key vulnerability exists in the u…6.9
- CVE-2026-102813An authentication flaw exists in the password-recovery funct…6.1
- CVE-2026-102814An authentication weakness exists in the TP-Link TDDP v2 ser…8.7
- CVE-2026-102815An operating-system command injection vulnerability exists i…6.9
- CVE-2026-10282A security vulnerability has been detected in Bottelet Dayby…5.3
- CVE-2026-102820pageant provides a [PageantStream] type that implements [Asy…6.2
- CVE-2026-102821Russh is a Rust SSH client and server library. Prior to 0.63…6.5
- CVE-2026-102822Russh is a Rust SSH client and server library. Prior to 0.63…3.7
- CVE-2026-102823Russh is a Rust SSH client and server library. Prior to 0.63…7.5
- CVE-2026-102824Russh is a Rust SSH client and server library. Prior to 0.63…4.3
Are you affected by CVE-2026-102816?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST