Reported by 2 outlets
TP-Link Archer Command Injection Flaws Enable Root-Level Code Execution
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 2.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.60 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
TP-Link Archer Command Injection Flaws Enable Root-Level Code Execution
gbhackers.com · 49d ago · August 25th, 2026
TP-Link has released firmware updates for three Archer router models due to the discovery of multiple command injection vulnerabilities. These vulnerabilities could enable attackers to execute arbitrary operating system commands with root privileges. The security advisory, updated on August 24, 2026, pertains to the Archer BE800 V1, Archer BE3600 V1, and Archer AX75 V1 devices. […] The post TP-Link Archer Command Injection Flaws Enable Root-Level Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from cyberpress.org
TP-Link Archer Command Injection Flaws Enable Root-Level Code Execution
cyberpress.org · 49d ago · August 25th, 2026
TP-Link has disclosed three high-severity command injection vulnerabilities affecting Archer BE800 V1, Archer BE3600 V1, and Archer AX75 V1 routers. The most severe issue, CVE-2026-9254, affects the parental-control functionality in all three router models. The vulnerability stems from insufficient filtering and neutralization of special characters in certain parameters. TP-Link Archer Command Injection Flaws A LAN-based attacker does not need authentication to exploit the flaw, provided they can reach the vulnerable device from the local network. TP-Link assigned CVE-2026-9254 a CVSS v4.0 score of 8.7, rated High. Successful exploitation can lead to complete device compromise, allowing an attacker to affect the confidentiality, integrity, and availability of both the router and traffic passing through it. Root-level execution on a network gateway could enable traffic interception, DNS manipulation , configuration changes, malicious firmware-related activity, or further attacks targeting connected systems. The second vulnerability, CVE-2026-16348, is an authenticated command injection flaw in the VPN connection functionality of Archer BE800 V1. An attacker with administrative access can inject shell metacharacters through a VPN connection and execute commands as root . Although exploitation requires administrator pr