CVE-2026-102815

Medium

Description

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback interface. A local attacker with access to a low-privileged process on the device may submit a crafted request to the TDDPv1 service and execute operating-system commands with root privileges. Successful exploitation may allow a local attacker with low privileges to obtain root privileges and execute arbitrary operating-system commands on the affected device.

SeverityMedium

CVSS6.9

Exploit probability—

ProductRE305 v3

PublishedOct 27, 2026

First seenOct 27, 2026

Weakness typeCWE-78OS command injection

How to fix

Update

TP-Link Systems Inc. RE305 v31.1.8 Build 20260921 Rel. 42853 or later

Patches

Vendor advisories

tp-link.com/us/support/faq/5362/

Affected products

Product	Affected versions	Fixed in
TP-Link Systems Inc. RE305 v3	v < 1.1.8 Build 20260921 Rel. 42853	1.1.8 Build 20260921 Rel. 42853

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.