Skip to main content

Tl Wr850N V3

2 CVEs product

Monthly

CVE-2026-12001 Jul 27, 20:08 MEDIUM PATCH This Month

Hardcoded credentials in TP-Link router firmware allow attackers with physical access to gain unauthorized access to privileged functions, potentially leading to full device compromise. Affected models include TL-WR845N v4, TL-WR850N v3, Archer C20 v6, and Archer MR200 v5. No evidence of active exploitation or public exploit code exists at this time, and the physical access requirement limits remote exploitation risk.

Authentication Bypass TP-Link Tl Wr850N V3 Archer C20 V6 Tl Wr845N V4 +2
NVD
CVSS 4.0
5.2
EPSS
0.2%
CVE-2026-4346 Mar 26, 21:16 MEDIUM PATCH This Month

Cleartext credential storage in TP-Link TL-WR850N v3 flash memory combined with weak serial interface authentication enables attackers with physical access to extract administrative and Wi-Fi credentials, leading to full device compromise and unauthorized network access. The vulnerability is addressed by a vendor patch, and exploitation requires physical proximity to the device's serial port with no public exploit code identified at time of analysis.

Authentication Bypass Tl Wr850N V3 Tp Link Systems Inc
NVD VulDB
CVSS 4.0
5.1
EPSS
0.0%
EPSS 0% CVSS 5.2
MEDIUM PATCH This Month

Hardcoded credentials in TP-Link router firmware allow attackers with physical access to gain unauthorized access to privileged functions, potentially leading to full device compromise. Affected models include TL-WR845N v4, TL-WR850N v3, Archer C20 v6, and Archer MR200 v5. No evidence of active exploitation or public exploit code exists at this time, and the physical access requirement limits remote exploitation risk.

Authentication Bypass TP-Link Tl Wr850N V3 +4
NVD
EPSS 0% CVSS 5.1
MEDIUM PATCH This Month

Cleartext credential storage in TP-Link TL-WR850N v3 flash memory combined with weak serial interface authentication enables attackers with physical access to extract administrative and Wi-Fi credentials, leading to full device compromise and unauthorized network access. The vulnerability is addressed by a vendor patch, and exploitation requires physical proximity to the device's serial port with no public exploit code identified at time of analysis.

Authentication Bypass Tl Wr850N V3 Tp Link Systems Inc
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy