CVE-2026-9033 | TP-Link ER7212PC Captive Portal Service privileges management

A vulnerability marked as critical has been reported in TP-Link ER7212PC, ER605, ER7206, ER7406, ER707-M2, ER7412-M2, ER8411, ER706W, ER706W-4G, ER706WP-4G, ER703WP-4G-Outdoor, DR3220v-4G, DR3650v, DR3650v-4G, ER603WP-4G-Outdoor, DR3150, ER701-5G-Outdoor and ER605W. Affected by this issue is some unknown functionality of the component Captive Portal Service. The manipulation leads to improper privilege management.

This vulnerability is referenced as CVE-2026-9033. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More