PT-2026-120876
CVE-2026-89052
·
Published
2026-10-21
·
Updated
2026-10-21
Description by
CVSS 4.0
5.9
MediumMetricsAV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
Archer C6 (affected versions not specified)
Description
Archer C6 uses a universal cryptographic key shared across all devices for cryptographic key management. An attacker who obtains an encrypted configuration file or other protected credential data can use this shared key to recover plaintext credentials, potentially leading to the unauthorized disclosure of sensitive information such as administrative credentials.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾