CVE-2026-89052Medium· 5.9▾ SunlitA hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration file or other protected credential data …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration file or other protected credential data can recover plaintext credentials.
Successful exploitation may allow unauthorized disclosure of sensitive information, including administrative credentials.
archer_c6_v2 < 1.2.1 Build 260902Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-30239High· 8.5In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. …
CVE-2026-100420Medium· 6.8Information disclosure vulnerability in the cloud-client daemon of Deco BE63
CVE-2025-62501High· 7.0SSH Hostkey Misconfiguration Vulnerability in Archer Devices
CVE-2026-105814Medium· 5.3Order-Dependent Authentication Bypass in the DS JSON API in TP-Link Tapo C210
CVE-2026-105815High· 7.1Credential Material Exposure Leading to Unauthorized Streamed Media-Session Access in TP-Link Tapo C210
CVE-2026-105810High· 8.5Authenticated Local Stack Overflow in TP-Link Tapo C320WS