Medium severity · published Mar 26, 2026
CVE-2026-4346
Cleartext Storage of Administrative and Wi-Fi Credentials via Accessible Serial Interface in TP Link's TL-WR850N
6.8
CVSS
0.1%
EPSS
No
On KEV
Description
The vulnerability affecting TL-WR850N v3 allows cleartext storage of administrative and Wi-Fi credentials in a region of the device’s flash memory while the serial interface remains enabled and protected by weak authentication. An attacker with physical access and the ability to connect to the serial port can recover sensitive information, including the router’s management password and wireless network key.
Successful exploitation can lead to full administrative control of the device and unauthorized access to the associated wireless network.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TV
TL-WR850N v3 · TP-Link Systems Inc.
before V3_0.9.1 Build251205 · source: vendor
TF
Tl-wr850n Firmware · Tp-link
before 0.9.1_Build251205 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-4346
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-4346
Product
https://www.tp-link.com/in/support/download/tl-wr850n/#Firmware
Vendor Advisory
https://www.tp-link.com/us/support/faq/5034/
More from TL-WR850N v3
5.2
CVE-2026-12001
Hardcoded Credential Vulnerability in Multiple TP-Link Router Models
