https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 08:32:26 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-18330 <p>A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to compromise session confidentiality.</p> <p>Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality.</p> <p>A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to compromise session confidentiality.</p> <p>Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-18330 https://vulnerability.circl.lu/vuln/ghsa-6x43-g54r-9p4x <p>A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to compromise session confidentiality.</p> <p>Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality.</p> <p>A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to compromise session confidentiality.</p> <p>Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality.</p> https://vulnerability.circl.lu/vuln/ghsa-6x43-g54r-9p4x