Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses the same credentials as the web interface. This enables an attacker to brute-force valid credentials via SSH. Successful exploitation could allow an attacker with adjacent network access to obtain administrative credentials through unrestricted authentication attempts and subsequently gain full administrative access to the device, impacting system confidentiality, integrity, and availability.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-8697 Unrestricted SSH Authentication Brute-Force in Archer C64 v1 Debug Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8697
Post summary
The entry identifies CVE-2026-8697 as an SSH brute‑force vulnerability in Archer C64 v1 debug service, but it provides no PoC, exploit code, patch, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | archer_c64 | 1.0 | - | - |
| OS | tp-link | archer_c64_firmware | 1.15.0 | - | - |