Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation. The web interface encrypts the admin password client-side using RSA-1024 before sending it to the router during login. An adjacent attacker with the ability to intercept network traffic could potentially perform a brute-force or factorization attack against the 1024-bit RSA key to recover the plaintext administrator password, leading to unauthorized access and compromise of the device configuration. This issue affects Archer C7: through Build 20220715.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-16 | 2 | Disclosure1General1 |
| 2026-05-24 | 1 | Disclosure1 |
🔴 TP-Link Archer C7, Inadequate Encryption Strength (CWE-326), #CVE-2026-5363 (Critical) https://dailycve.com/tp-link-archer-c7-inadequate-encryption-strength-cwe-326-cve-2026-5363-critical/
Post summary
The text announces the discovery of a critical CVE-2026-5363 affecting TP‑Link Archer C7 devices due to inadequate encryption strength, presenting essential technical details but no evidence of exploitation or patches.
CVE-2026-5363 Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation. The web interface encrypts the adm… https://www.cve.org/CVERecord?id=CVE-2026-5363
Post summary
The post outlines CVE‑2026‑5363 as an inadequate encryption strength issue in TP‑Link Archer C7 firmware that enables password recovery exploitation, but it does not provide PoC, exploit code, patches, or evidence of active attacks.
CVE-2026-5363 Inadequate Encryption Strength in TP-Link Archer C7 v5 and v5.8 Al... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5363 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The entry announces CVE‑2026‑5363 and highlights an encryption weakness in specific TP‑Link Archer C7 models, linking to a vulnerability database, but offers no further technical, exploitation, or mitigation details.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | archer_c7 | 5.0 | - | - |
| HW | tp-link | archer_c7 | 5.80 | - | - |
| OS | tp-link | archer_c7_firmware | - | - | - |