P5Verified

CVE-2026-15469: Deco XE75 v3 / XE5300 v3.6/ WE10800 v3.6 0 to before 1.5.0 Build 20260603

CVE-2026-15469. EPSS 0.00378 (percentile 0.29813), scored 11-Oct-2026.

Affected technology

Deco XE75 v3 / XE5300 v3.6/ WE10800 v3.6 · 0 to before 1.5.0 Build 20260603
TP-Link Systems Inc.

Description’s affected range: v3.6 and WE10800 v3.6

Component: mesh

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

An unauthenticated adjacent attacker may impersonate a trusted mesh node and bypass mesh node authentication, which may permit unauthorized changes to device or mesh configuration, affecting confidentiality, integrity and availability. Source advisory’s CVSS 4.0 assessment (base score 7.7/10) rates confidentiality, integrity and availability impact as high.

Published 12-Oct-2026 16:55 UTC

CWE: CWE-321
CCR priority: 0.1 /100 (P5)
EPSS: 0.00378 · percentile 0.29813 · 2026-10-11
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-12 16:54:24.294989+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-15469.html