NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-3294
Summary

An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and reset the administrator password due to insufficient validation.

Successful exploitation allows an attacker to obtain full administrative control of the affected device, potentially impacting on confidentiality, integrity, and availability.

Publication Date May 23, 2026, 6:16 a.m.
Registration Date May 27, 2026, 4:06 a.m.
Last Update May 23, 2026, 6:16 a.m.
Related information, measures and tools
Common Vulnerabilities List