CVE-2026-89052

Published: Ott 22, 2026 Last Modified: Ott 22, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,9
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Attack Vector: network
Attack Complexity: low
Privileges Required: high
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration file or other protected credential data can recover plaintext credentials. 

Successful exploitation may allow unauthorized disclosure of sensitive information, including administrative credentials.

321

Use of Hard-coded Cryptographic Key

Draft
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Bypass Protection Mechanism Gain Privileges Or Assume Identity Read Application Data
Applicable Platforms
Technologies: ICS/OT
Likelihood of Exploit: High
View CWE Details
https://www.tp-link.com/us/support/download/archer-c6/v2/#F…
https://www.tp-link.com/us/support/download/archer-c6/v2/#Firmware
https://www.tp-link.com/us/support/faq/5356/
https://www.tp-link.com/us/support/faq/5356/