CVE-2026-102816: medium-severity vulnerability in TP-Link Systems Inc. RE305 v3
Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.2%
An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory region and force the device to reapply its wireless configuration.
Successful exploitation may cause wireless connection interruptions, unavailable channels, client disconnections, or wireless service instability, and may cause the device to apply parameters intended for a different regulatory region.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected products
TP-Link Systems Inc. · RE305 v3Related CVEs — TP-Link Systems Inc. RE305 v3
In the same product, most dangerous first.
CVE-2026-102815MEDIUMCommand Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305EPSS 0.6%CVE-2026-102814HIGHImproper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305EPSS 0.4%CVE-2026-18330MEDIUMHardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7EPSS 0.3%CVE-2026-102813MEDIUMAdministrator Password Reset Through the Verification-Code Interface in TP-Link RE305EPSS 0.2%CVE-2026-102812MEDIUMHardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7EPSS 0.1%