PT-2026-120877 · Tp Link Systems · Deco Be63 V2.0
CVE-2026-100420
·
Published
2026-10-21
·
Updated
2026-10-21
CVSS v4.0
6.8
Medium
| Vector | AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password.
Successful exploitation may allow attackers to compromise the associated cloud account and perform unauthorized actions on behalf of the affected user.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Deco Be63 V2.0