Vulnerabilities

TI-2026-12984 CVE-2026-15429 · GHSA-h838-7g67-j96h

Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800v

LOW 28

A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.01389 Published 2026-07-14 Fixed in 0.16.0 2.0.0 v6092.0 Build 260521 RC.7927n CWE-93

TI-2026-12983 CVE-2026-15428 · GHSA-fxq7-2872-5xg8

OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v

MEDIUM 43

An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain name parameter.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.02083 Published 2026-07-14 Fixed in 0.16.0 2.0.0 v6092.0 Build 260521 RC.7927n CWE-78

TI-2026-12982 CVE-2026-15427 · GHSA-pjj3-47vg-vqcj

OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v

MEDIUM 41

An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input to be executed as sy…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00836 Published 2026-07-14 Fixed in 0.16.0 2.0.0 v6092.0 Build 260521 RC.7927n CWE-78

Vulnerabilities

Filters

Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800v

OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v

OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v