CVE-2026-102812 Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-102812?
CVE-2026-102812 is a medium-severity vulnerability in TP-Link Systems Inc. Archer C7 v5, published on 27 Oct 2026.
Official description
A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component. An attacker who obtains an affected configuration backup file may extract the cryptographic material from the firmware and use it to decrypt the backup.
Successful exploitation may disclose sensitive configuration information contained in a backup file, including administrator passwords and Wi-Fi credentials.
Weakness: CWE-321
Which versions are affected by CVE-2026-102812?
How do I fix CVE-2026-102812?
No fix has been published for CVE-2026-102812 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-102812 being exploited?
There is no known exploitation of CVE-2026-102812 in the wild and no public exploit code.
Sources
Also known as GHSA-xgv8-3vj8-53q7.