CVE-2026-3294

🗓️ 22 May 2026 20:48:36Reported by TPLinkType

Authentication flaw in TP-Link range extenders lets unauthorized nearby attackers reset the admin password and gain full control.

Reporter	Title	Published	Views	Family All 9
attackerkb	CVE-2026-3294	22 May 202620:48	–	attackerkb
CNNVD	TP-Link’s various products have security vulnerabilities	22 May 202600:00	–	cnnvd
Cvelist	CVE-2026-3294 Authentication Logic Vulnerability on Multiple TP-Link Range Extenders	22 May 202620:48	–	cvelist
EUVD	EUVD-2026-31502	22 May 202620:48	–	euvd
NVD	CVE-2026-3294	22 May 202621:16	–	nvd
Positive Technologies	PT-2026-42832	22 May 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-3294: Improper Input Validation	22 May 202600:00	–	rapid7
RedhatCVE	CVE-2026-3294	26 May 202620:13	–	redhatcve
Vulnrichment	CVE-2026-3294 Authentication Logic Vulnerability on Multiple TP-Link Range Extenders	22 May 202620:48	–	vulnrichment

NVD

Vulners

Node

AND

tp-link re305_firmwareRange<20260515

tp-link re305Match1.0

Node

AND

tp-link re360_firmwareRange<20260515

tp-link re360Match1.0

Node

AND

tp-link re580d_firmwareRange<20260515

tp-link re580dMatch1.0

Node

AND

tp-link re650_firmwareRange<20260429

tp-link re650Match1.0

Node

AND

tp-link tl-wa860re_firmwareRange<20260515

tp-link tl-wa860reMatch4.0

[
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer RE650 v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V1_20260429",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer RE305 v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V1_20260515",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP Link Systems Inc.",
    "product": "Archer RE360 v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V1_20260515",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "TL-WA860RE v4",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V4_20260515",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "RE580D v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V1_20260515",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
tp-link	www.tp-link.com/us/support/download/re650/v1/
tp-link	www.tp-link.com/us/support/download/re580d/
tp-link	www.tp-link.com/us/support/download/re305/v1/
tp-link	www.tp-link.com/en/support/download/re580d/
tp-link	www.tp-link.com/us/support/download/tl-wa860re/v4/
tp-link	www.tp-link.com/en/support/download/re360/v1/
tp-link	www.tp-link.com/en/support/download/re305/v1/
tp-link	www.tp-link.com/en/support/download/tl-wa860re/v4/
tp-link	www.tp-link.com/en/support/download/re650/v1/
tp-link	www.tp-link.com/us/support/faq/5101/

23 Jul 2026 11:10Current

6Medium risk

Vulners AI Score6

CVSS 3.18.8

CVSS 48.7

EPSS0.00398

SSVC