CVE-2026-102815
Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process on the device may submit a crafted request to the TDDPv1 service and execute operating-system commands with root privileges. Successful exploitation may allow a local attacker with low privileges to obtain root privileges and execute arbitrary operating-system commands on the affected device.
| CWE | CWE-78 |
| Vendor | tp-link systems inc. |
| Product | re305 v3 |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for tp-link systems inc. re305 v3
Be the first to know when new unknown vulnerabilities affecting tp-link systems inc. re305 v3 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
TP-Link Systems Inc. / RE305 v3
0 < 1.1.8 Build 20260921 Rel. 42853
References
Credits
Victor Mota