EIP-2026-101482

PRE-CVE

TP-Link TL-WR2543ND Router - Admin Panel Multiple Cross-Site Request Forgery Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101482. PoCs published by Juan Manuel Garcia.

AI-analyzed exploit summary This exploit demonstrates CSRF vulnerabilities in TP-LINK TL-WR2543ND by providing crafted URLs that modify device configuration without proper request validation. The PoC includes endpoints for changing NAS admin credentials and security settings.

Description

TP-Link TL-WR2543ND Router - Admin Panel Multiple Cross-Site Request Forgery Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by Juan Manuel Garcia · textremotehardware

https://www.exploit-db.com/exploits/38308

View Code ZIP pw:eip

This exploit demonstrates CSRF vulnerabilities in TP-LINK TL-WR2543ND by providing crafted URLs that modify device configuration without proper request validation. The PoC includes endpoints for changing NAS admin credentials and security settings.

Classification

Working Poc 90%

Attack Type

Other

Complexity

Trivial

Reliability

Reliable

Target: TP-LINK TL-WR2543ND 3.13.6 Build 110923

No auth needed

Prerequisites: Victim must be authenticated and tricked into visiting malicious URLs

MITRE ATT&CK

T1189 - Drive-by Compromise T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026