CVE-2026-102816: Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305
An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory region and force the device to reapply its wireless configuration.
Successful exploitation may cause wireless connection interruptions, unavailable channels, client disconnections, or wireless service instability, and may cause the device to apply parameters intended for a different regulatory region.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker must be on the same local network as the TP-Link RE305 V3. The provided information does not indicate that remote Internet-based access alone is sufficient.
What can an attacker do by exploiting it?
An attacker can change the wireless country or region setting and force the extender to reapply its wireless configuration. This can interrupt wireless connectivity, disconnect clients, make channels unavailable, and create service instability.
Are deployments affected without an attacker knowing administrator credentials?
Yes. The affected country or region configuration interface can be modified without authentication, so administrator credentials are not required for the described attack.
What should be prioritized if immediate remediation is not possible?
Restrict access to the local network to trusted users and devices, since exploitation requires presence on the same local network. Monitor for unexpected wireless region changes, configuration reapplication events, client disconnects, unavailable channels, or wireless instability.