CVE-2026-89052— Hardcoded AES encryption key in Archer C6
Quick assessment
Affected
TP-Link Systems Inc. Archer C6 V2
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Archer C6 存在硬编码的密钥管理漏洞，原因是所有设备共享一个通用加密密钥。攻击者若获取到加密的配置文件或其他受保护的凭据数据，即可恢复明文凭据。 成功利用该漏洞可能导致敏感信息被未经授权地泄露，包括管理员凭据。
Possible ATT&CK Techniques 2 AI
T1003 · OS Credential Dumping T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-89052
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Hardcoded AES encryption key in Archer C6
Source: CVE Program / CVE List V5
Vulnerability Description
A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration file or other protected credential data can recover plaintext credentials.
Successful exploitation may allow unauthorized disclosure of sensitive information, including administrative credentials.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的密码学密钥
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TP-Link Systems Inc. | Archer C6 V2 | 0 ~ 1.2.1 Build 260902 | - |
|
II. Public POCs for CVE-2026-89052
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-89052
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-89052 (1)
Vendor Pages for CVE-2026-89052 (1)
IV. Related Vulnerabilities
Same vendor: TP-Link Systems Inc.
-
CVE-2026-100420
Information disclosure vulnerability in the cloud-client dae -
CVE-2026-105815
Credential Material Exposure Leading to Unauthorized Streame -
CVE-2026-105814
Order-Dependent Authentication Bypass in the DS JSON API in -
CVE-2026-105810
Authenticated Local Stack Overflow in TP-Link Tapo C320WS -
CVE-2026-107795
Improper Authorization in TP-Link Omada Controller TLS Certi
Same weakness: CWE-321
-
CVE-2026-76298
Use of Hard-coded Cryptographic Key in the PostgreSQL Sideca -
CVE-2026-82891
IBM Guardium Data Protection is affected by a security vulne -
CVE-2026-113466
MinIO Embedded Console common-main.go SessionTokenAuthentica -
CVE-2026-112014
LobsterAI before 2026.10.16 Hardcoded Password in Provider A -
CVE-2026-111696
data-platform-open through commit efeacd3 Hardcoded AES Key
V. Comments for CVE-2026-89052
No comments yet