CVE-2026-12001: Hardcoded Credential Vulnerability in Multiple TP-Link Router Models
Published Jul 27, 2026
·Updated
A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, Archer C20 v6 & Archer MR200 v5). Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through firmware analysis.
Successful exploitation could result in unauthorized access to privileged functions on affected devices.
Affected Software
4 affected components
TP-Link TL-WR845N=v4
TP-Link TL-WR850N=v3
TP-Link Archer C20=v6
TP-Link Archer MR200=v5
Event History
Jul 27, 2026
CVE Published
via MITRE·08:08 PM
Data Sourced
via MITRE·08:08 PM
DescriptionWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeakness