Vulnerability Description
A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration file or other protected credential data can recover plaintext credentials. Successful exploitation may allow unauthorized disclosure of sensitive information, including administrative credentials.
Related Weaknesses (CWE)
References
- https://www.tp-link.com/us/support/download/archer-c6/v2/#Firmware
- https://www.tp-link.com/us/support/faq/5356/
FAQ
What is CVE-2026-89052?
CVE-2026-89052 is a documented vulnerability. A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration fil...
How severe is CVE-2026-89052?
CVSS scoring is not yet available for CVE-2026-89052. Check NVD for updates.
Is there a patch for CVE-2026-89052?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.