CVE-2026-89052CWE-321

CVE-2026-89052

published October 22, 2026

CVSS
5.9
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration file or other protected credential data can recover plaintext credentials.

Successful exploitation may allow unauthorized disclosure of sensitive information, including administrative credentials.

The record
Technical detail
CVSS
5.9 · NONE
CVSS v4.0
5.9 · CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00238 · 14.0th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2026-10-22T03:17Z
References (2)
EPSS history
Timeline
  • 23 OCT 04:09Z
    EPSS moved — → 0%
    epss
  • 21 OCT 22:40Z
    Hardcoded AES encryption key in Archer C6
    cvelistv5
  • 21 OCT 22:40Z
    Hardcoded AES encryption key in Archer C6
    cvelistv5