Security Advisory

CVE-2026-12001

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-27 20:08:50

Last updated 2026-07-28 20:49:43

Assigner TPLink

CVSS score not scored

State PUBLISHED

Description

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, Archer C20 v6 & Archer MR200 v5). Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through firmware analysis. Successful exploitation could result in unauthorized access to privileged functions on affected devices.

← Browse all CVEs View on cve.org ↗