CVE-2026-12001

MediumCVSS 5.2

Published: 27/07/2026(UTC)Updated: 11/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

17th percentile - higher than 17% of all known CVEs

Summary

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5). Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through firmware analysis. Successful exploitation could result in unauthorized access to privileged functions on affected devices.

Risk Assessment

Risk of unauthorized access to administrative functions of the router, potentially allowing device and network compromise.

Recommendation

Update router firmware to the latest version if a patch is available. Change default passwords and restrict administrative access.

Other vulnerabilities in TP-Link routers

CVE-2026-8619High
An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send a specially crafted HTTP request to trigger a crash of the HTTP service process.

Original NVD description (English source)