All vulnerabilities
CVE-2026-102816

Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305

TP-Link Systems Inc. RE305 v3Network & edge
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in1.1.8 Build 20260921 Rel. 42853Fixed versionCVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

  • 1.1.8 Build 20260921 Rel. 42853RE305 v3CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory region and force the device to reapply its wireless configuration.

Successful exploitation may cause wireless connection interruptions, unavailable channels, client disconnections, or wireless service instability, and may cause the device to apply parameters intended for a different regulatory region.

Text from CVE List

Affected versions 1

  • RE305 v3affected: all versions before 1.1.8 Build 20260921 Rel. 42853CVE List

References 3