Login Request a demo
RV
Product
RE305 v3
by TP-Link Systems Inc. · last CVE Oct 27, 2026
6
CVEs
0
On KEV
8.7
Max CVSS
5
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 1Medium 5Low 0
Severity
All severities6Critical0High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add RE305 v3 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102814
New
8.7–Oct 27
Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305
Affected: before 1.1.8 Build 20260921 Rel. 42853
CVE-2026-102815
New
6.9–Oct 27
Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305
Affected: before 1.1.8 Build 20260921 Rel. 42853
CVE-2026-102812
New
6.9–Oct 27
Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7
Affected: before 1.1.8 Build 20260921 Rel. 42853
CVE-2026-102813
New
6.1–Oct 27
Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305
Affected: before 1.1.8 Build 20260921 Rel. 42853
CVE-2026-18330
6.1
0%
Sep 3
Hardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7
Affected: before 1.1.8 Build 20260921 Rel. 42853
CVE-2026-102816
New
5.3–Oct 27
Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305
Affected: before 1.1.8 Build 20260921 Rel. 42853
Showing 6