CVE-2026-100420
— UNSCOREDPublished 2026-10-21 · Updated 2026-10-22
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password. Successful exploitation may allow attackers to compromise the associated cloud account and perform unauthorized actions on behalf of the affected user.
Weaknesses
CWE-202
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- UNSCOREDCVE-2026-103440
- MEDIUMCVE-2026-106506PoC
- HIGHCVE-2026-25703PoC
- MEDIUMCVE-2026-40533
- UNSCOREDCVE-2026-70473PoC
- UNSCOREDCVE-2026-79613
- UNSCOREDCVE-2026-79620
- UNSCOREDCVE-2026-79633
Related by shared AI tags and CWE weakness class. Browse the full archive.