CVE-2026-18330 — Hardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7

The CERT title describes a hardcoded shared RSA-1024 private key in web login for the TP-Link RE305 and Archer C7. The extracted text describes the same type of vulnerability in the web module of the TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key reduces the effort required to compromise session confidentiality.