Vulnerability intelligence

CVE-2026-9033

TP-Link Systems Inc. ER7212PC v2 CWE-306

An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access. Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.

CVSS Score

Medium

EPSS — Exploit Probability

0.3%

Riskier than 18% of all CVEs · checked 2026-10-04

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory