CVE-2026-102815

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process on the device may submit a crafted request to the...

EUVD-2026-111274

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process on the device may submit a crafted request to the...

CVE-2026-102815 Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process on the device may submit a crafted request to the...

CVE-2026-102815

A local command injection vulnerability exists in the tmpServer service of the TP-Link RE305 V3 . The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process can submit a crafted request to the TDDPv1 service to execu...

PT-2026-127149

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process on the device may submit a crafted request to the...