cve-2026-8697

CVE-2026-8697：TP-Link Archer C64 登录速率限制绕过 CVE-2026-8697 是 TP-Link Archer C64 操作系统（调试信息中称为 TPOS）中的一个逻辑缺陷。它允许任何连接到路由器的非特权用户通过使用残留的 SSH 服务来绕过 Web 界面的速率限制。一个简单的 Python 脚本可以在短时间内尝试大量密码，从而获得路由器的完全管理员访问权限。 POC: poc.py 该路由器有一个调试 SSH 服务，该服务不会授予路由器...

The vulnerability of the SSH service in the TP-Link Archer C64 router’s microprogramming software allows a attacker to execute a brute-force attack.

The vulnerability of the SSH service in TP-Link Archer C64 software routers involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to execute a brute-force attack remotely...

TP-Link Archer C64 安全漏洞

The TP-Link Archer C64 is a wireless router produced by TP-Link Corporation. The TP-Link Archer C64 V1 version has a security vulnerability. This vulnerability stems from improper execution of the authentication rate limit during the debugging of the SSH service. As a result, attackers in adjacen...