Vulnerability in Tp Link Systems Inc. Tl-Wr845n V4
CVE-2026-12001
A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5). Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through firmware analysis. Successful exploitation could result in unauthorized access to privileged functions on affected devices.
EPSS: 0.003 (16.5th percentile) — read the EPSS interpretation.
Affected products
- Tp Link Systems Inc. Tl-wr845n V4 — versions 0
- Tp Link Systems Inc. Tl-wr902ac V4 — versions 0
- Tp-link Systems Inc. Archer C20 V6 — versions 0
- Tp-link Systems Inc. Archer Mr200 V5 — versions 0
- Tp-link Systems Inc. Tl-wr850n V3 — versions 0
Weakness classification (CWE)
References
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)