MEDIUM 5.9 NVD
CVE-2026-89052
A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker wh
A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration file or other protected credential data can recover plaintext credentials.
Successful exploitation may allow unauthorized disclosure of sensitive information, including administrative credentials.
References
- https://www.tp-link.com/us/support/download/archer-c6/v2/#Firmware
- https://www.tp-link.com/us/support/faq/5356/
This medium severity vulnerability with a CVSS score of 5.9 was published on 2026-10-21 via NVD.
vulnfeed aggregates 18809 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.