CVE-2026-100420
Information disclosure vulnerability in the cloud-client daemon of Deco BE63
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password. Successful exploitation may allow attackers to compromise the associated cloud account and perform unauthorized actions on behalf of the affected user.
| CWE | CWE-202 |
| Vendor | tp-link systems inc. |
| Product | deco be63 v2.0 |
| Published | Oct 21, 2026 |
Stay Ahead of the Next One
Get instant alerts for tp-link systems inc. deco be63 v2.0
Be the first to know when new unknown vulnerabilities affecting tp-link systems inc. deco be63 v2.0 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
TP-Link Systems Inc. / Deco BE63 V2.0
0 < 1.3.3 Build 26071612