Threats Tagged 'cve-2026-5363'

CVE-2026-5363 is a medium-severity vulnerability affecting TP-Link Archer C7 v5 and v5. 8 routers through build 20220715. The vulnerability arises from the use of inadequate encryption strength, specifically RSA-1024, to encrypt the admin password client-side before transmission during login. An adjacent attacker capable of intercepting network traffic could attempt to brute-force or factor the RSA-1024 key to recover the plaintext administrator password. This could lead to unauthorized access and compromise of the device configuration. No official patch or remediation guidance is currently available from the vendor. The vulnerability does not affect cloud services and no known exploits are reported in the wild.