Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: TP-Link Systems Archer BE800 V1 — tp-link.com/us/support/faq/5264 Clear all filters
TI-2026-13655 CVE-2026-16348 · GHSA-55gr-958w-9j4g

Command Injection Vulnerability in VPN connection of Archer BE800

Priority MEDIUM 43

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a…

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.0215 Published 2026-08-24 Fixed in 1.4.2 Build 260708 CWE-78
TI-2026-08130 CVE-2026-9254 · GHSA-3h97-6772-mpj4

Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices

Priority MEDIUM 45

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain…

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.03055 Published 2026-08-24 Fixed in 1.4.2 Build 260708, 1.2.6 Build 20260617 +1 CWE-78