CVE-2026-100420
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 21, 2026
Vendor
unknown
Description
A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password. Successful exploitation may allow attackers to compromise the associated cloud account and perform unauthorized actions on behalf of the affected user.