Medium 5.2Published Jul 27, 2026

CVE-2026-12001Hardcoded Credential Vulnerability in Multiple TP-Link Router Models

Updated under an hour ago (Oct 28, 2026, 2:40 AM ET)

Does this affect you?

It affects TP-Link Systems Inc. TL-WR850N v3 and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for TP-Link Systems Inc. TL-WR850N v3

Exploited in the last 30 days

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5). Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through firmware analysis. Successful exploitation could result in unauthorized access to privileged functions on affected devices.

CVSS: 5.2 MEDIUM (v4.0, CNA)CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
Weakness (CWE): CWE-798
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: TPLink
NVD analysis: Deferred
Record last updated: Aug 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

TP-Link Systems Inc. TL-WR850N v3 tp_link_systems:tl_wr850n_v3 (from the name)	before TL-WR850N(IN)_V3.48_3.16.0 Build 260422_2048	CNA record
TP-Link Systems Inc. Archer C20 v6 tp_link_systems:archer_c20_v6 (from the name)	before Archer C20(US)_V6_250630	CNA record
TP Link Systems Inc. TL-WR845N v4 tp_link_systems:tl_wr845n_v4 (from the name)	before TL-WR845N(UN)_V4_250401	CNA record
TP-Link Systems Inc. Archer MR200 v5 tp_link_systems:archer_mr200_v5 (from the name)	before EU_V5.20_1.3.0 Build 260319	CNA record
TP Link Systems Inc. TL-WR902AC v4 tp_link_systems:tl_wr902ac_v4 (from the name)	before US_V4_0.9.1 Build 260810; before EU_V4_0.9.3 Build 260728	CNA record

References

References

https://www.tp-link.com/en/support/download/archer-mr200/v5/#Firmware	patch
https://www.tp-link.com/in/support/download/archer-mr200/v5/#Firmware	patch
https://www.tp-link.com/en/support/download/archer-c20/v6/#Firmware	patch
https://www.tp-link.com/us/support/download/archer-c20/v6/#Firmware	patch
https://www.tp-link.com/in/support/download/archer-c20/v6/#Firmware	patch
https://www.tp-link.com/en/support/download/tl-wr845n/#Firmware	patch
https://www.tp-link.com/in/support/download/tl-wr845n/#Firmware	patch
https://www.tp-link.com/in/support/download/tl-wr850n/#Firmware	patch
https://www.tp-link.com/us/support/faq/5210/	vendor-advisory
https://www.tp-link.com/us/support/download/tl-wr902ac/v4/#Firmware	patch
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.