CVE-2026-89052

Status: Received

Description

A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypted configuration file or other protected credential data can recover plaintext credentials.  Successful exploitation may allow unauthorized disclosure of sensitive information, including administrative credentials.

Published
October 21, 2026 11:17 PM
Last Modified
October 21, 2026 11:17 PM
Source
f23511db-6c3e-4e32-a477-6aa17d310630

Weaknesses (CWE)

CWE-321

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry