CVE-2026-9033: CWE-306 Missing Authentication for Critical Function in TP-Link Systems Inc. ER7212PC v2
An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access. Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.
AI Analysis
Technical Summary
This vulnerability, identified as CWE-306 (Missing Authentication for Critical Function), affects the captive portal service of TP-Link ER7212PC v2 devices. An attacker without authentication but with network access to the captive portal can terminate active sessions, disrupting user connectivity by forcing logouts. The CVSS 4.0 score is 6.0 (medium severity), reflecting the attack vector as adjacent network with low attack complexity and no required privileges or user interaction. No vendor advisory or patch information is currently available.
Potential Impact
Successful exploitation results in temporary denial of service for users relying on the captive portal, as their sessions can be terminated without authentication. Users must re-authenticate to regain network access. There is no indication of data compromise or privilege escalation from this vulnerability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the captive portal service to trusted users only, if possible, to reduce exposure.
CVE-2026-9033: CWE-306 Missing Authentication for Critical Function in TP-Link Systems Inc. ER7212PC v2
Description
An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access. Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.
CVSS v4.0
Score 6.0medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability, identified as CWE-306 (Missing Authentication for Critical Function), affects the captive portal service of TP-Link ER7212PC v2 devices. An attacker without authentication but with network access to the captive portal can terminate active sessions, disrupting user connectivity by forcing logouts. The CVSS 4.0 score is 6.0 (medium severity), reflecting the attack vector as adjacent network with low attack complexity and no required privileges or user interaction. No vendor advisory or patch information is currently available.
Potential Impact
Successful exploitation results in temporary denial of service for users relying on the captive portal, as their sessions can be terminated without authentication. Users must re-authenticate to regain network access. There is no indication of data compromise or privilege escalation from this vulnerability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the captive portal service to trusted users only, if possible, to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- TPLink
- Date Reserved
- 2026-05-19T16:30:37.346Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a874d0dacd9273b4902461c
Added to database: 08/20/2026, 18:53:01 UTC
Last enriched: 08/20/2026, 19:07:21 UTC
Last updated: 08/20/2026, 19:12:12 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.