Cleartext Credential Storage Vulnerability in TL-WR850N by TP-Link

CVE-2026-4346

What is CVE-2026-4346?

The TL-WR850N v3 device is susceptible to a vulnerability that allows sensitive administrative and Wi-Fi credentials to be stored in plaintext within its flash memory. This issue arises while the serial interface is enabled and safeguarded by weak authentication measures. An attacker who has physical access to the device can connect to the serial port, potentially leading to the recovery of critical information, such as the management password and wireless network key. If exploited, this vulnerability grants unauthorized individuals complete administrative control over the router, posing significant risks to the associated wireless network.

References