Threat Investigation
Request a demo

CVE-2026-9033

Medium

Description

An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access.  Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.

SeverityMedium
CVSS4.3
Exploit probability—
ProductTp-link Er7212pc Firmware
PublishedAug 20, 2026
First seenAug 20, 2026
Weakness typeCWE-306Missing authentication for critical function

How to fix

Update
  • tp-link er7212pc_firmware2.4.3 or later
  • tp-link er605_firmware2.4.4 or later
  • tp-link er7206_firmware2.3.5 or later
  • tp-link er7406_firmware1.3.4 or later
  • tp-link er707-m2_firmware1.4.4 or later
  • tp-link er7412-m2_firmware1.2.0 or later
  • tp-link er8411_firmware1.4.1 or later
  • tp-link er706w_firmware1.2.11 or later
  • tp-link er706w-4g_firmware1.2.6, 2.1.11 or later
  • tp-link er706wp-4g_firmware1.1.11 or later
  • tp-link er703wp-4g-outdoor_firmware1.1.7 or later
  • tp-link dr3220v-4g_firmware1.2.0 or later
Patches
Vendor advisories

Affected products

ProductAffected versionsFixed in
tp-link er7212pc_firmwarev < 2.4.32.4.3
tp-link er605_firmwarev < 2.4.42.4.4
tp-link er7206_firmwarev < 2.3.52.3.5
tp-link er7406_firmwarev < 1.3.41.3.4
tp-link er707-m2_firmwarev < 1.4.41.4.4
tp-link er7412-m2_firmwarev < 1.2.01.2.0
tp-link er8411_firmwarev < 1.4.11.4.1
tp-link er706w_firmwarev < 1.2.111.2.11
tp-link er706w-4g_firmwarev < 1.2.6, v < 2.1.111.2.6, 2.1.11
tp-link er706wp-4g_firmwarev < 1.1.111.1.11
tp-link er703wp-4g-outdoor_firmwarev < 1.1.71.1.7
tp-link dr3220v-4g_firmwarev < 1.2.01.2.0
tp-link dr3650v_firmwarev < 1.2.01.2.0
tp-link dr3650v-4g_firmwarev < 1.2.01.2.0
tp-link er603wp-4g-outdoor_firmwarev < 1.0.21.0.2
tp-link dr3150_firmwarev < 1.0.11.0.1
tp-link er701-5g-outdoor_firmwarev < 1.0.31.0.3
tp-link er605w_firmwarev < 2.0.42.0.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.