Hi there, 

I think I have found a huge security issue with Deco. 2 years ago, my network consisted of a router/modem, used to handle internet and DHCP on my home network, and a set of 3 Deco M5 units. That worked OK, but found some issues with backhaul that ended up with me buying a set of Deco p9s instead. I reset the M5s about 12 months ago, and ended up giving the M5s to my neighbour and got them to set up their own network. 

For the most part things have worked pretty well, but in the past 2 months i have had some significant issues with internet drops (lasting 20secs to 3-4 mins) and struggled to work out the cause. 

Recently, I have been digging on this and have started visiting my router/modem (a tp link vr400) at 192.168.1.1 to see what is going on, but have beenseeing intermittently a Vodafone router homepage (I dont have one) and if I refresh the page it will show again as tp link and I can view logs. Digging more, I was watching the mac address of my gateway using arp commands, and noticed it changing quite frequently from a TP Link mac to a Hauwei mac. It turns out that my mesh network is extending the next door neighbours mesh. I fixed my drops by changing my internal subnet to a different one but Im still able to jump between 19.168.1.x and my new one 192.168.100.x. When I set my laptop as 192.168.1.x my wan IP changes and Im effectively on their network. How is this possible? This seems like a massive security risk?