EIP-2026-102078

PRE-CVE

TP-Link WR842ND - Remote Multiple SSID Directory Traversals

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102078. PoCs published by Adam Simuntis.

AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in TP-LINK WR842ND routers to retrieve SSID and WPA passphrase information from configuration files. It sends crafted HTTP requests to traverse directories and extract sensitive data from temporary files.

Description

TP-Link WR842ND - Remote Multiple SSID Directory Traversals

Exploits (1)

exploitdb WORKING POC
by Adam Simuntis · pythonwebappshardware
https://www.exploit-db.com/exploits/25810

This exploit leverages a directory traversal vulnerability in TP-LINK WR842ND routers to retrieve SSID and WPA passphrase information from configuration files. It sends crafted HTTP requests to traverse directories and extract sensitive data from temporary files.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: TP-LINK WR842ND Firmware Version 3.12.22 Build 120424 Rel.39632n
No auth needed
Prerequisites: Remote management enabled or local network access · Vulnerable firmware version
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026