CVE-2026-9033
MEDIUM
MEDIUM
Priority: 0.02
BB Relevance:
57/100
Published: 2026-08-20
Modified: 2026-10-26
First seen: 2026-10-29
Status: active
Attack Surface
Adjacent
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Adjacent
AC:
Low
PR:
None
UI:
None
S:
X
AT:
Present
VC:
None
VI:
None
VA:
High
Description
An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access. Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.
Weakness Classification (1)
Affected Software (19)
| Vendor | Product | Version |
|---|---|---|
| tp-link | dr3150_firmware | < 1.0.1 |
| tp-link | dr3220v-4g_firmware | < 1.2.0 |
| tp-link | dr3650v-4g_firmware | < 1.2.0 |
| tp-link | dr3650v_firmware | < 1.2.0 |
| tp-link | er603wp-4g-outdoor_firmware | < 1.0.2 |
| tp-link | er605_firmware | < 2.4.4 |
| tp-link | er605w_firmware | < 2.0.4 |
| tp-link | er701-5g-outdoor_firmware | < 1.0.3 |
| tp-link | er703wp-4g-outdoor_firmware | < 1.1.7 |
| tp-link | er706w-4g_firmware | < 1.2.6 |
| tp-link | er706w-4g_firmware | < 2.1.11 |
| tp-link | er706w_firmware | < 1.2.11 |
| tp-link | er706wp-4g_firmware | < 1.1.11 |
| tp-link | er707-m2_firmware | < 1.4.4 |
| tp-link | er7206_firmware | < 2.3.5 |
| tp-link | er7212pc_firmware | < 2.4.3 |
| tp-link | er7406_firmware | < 1.3.4 |
| tp-link | er7412-m2_firmware | < 1.2.0 |
| tp-link | er8411_firmware | < 1.4.1 |
References & Advisories (3)
Vendor Advisory
Product
Product