Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: TP Link Systems Archer BE3600 v1 — tp-link.com/us/support/faq/4935 Clear all filters
TI-2026-17833 CVE-2026-22223 · GHSA-jvhp-3qqj-g4mf

Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1

Priority MEDIUM 42

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and BE3600 v1 (vpn modules) allows adjacent authenticated attacker execute arbitrary code.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.01376 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420, (KR)_V1_1.2.2 Build 20260903 +2 CWE-78
TI-2026-00429 CVE-2026-0631 · GHSA-j6g9-f586-p93v

Authenticated Command Injection Vulnerability in Surfshark VPN Login in multiple Archer products

Priority MEDIUM 42

An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1, AX10 v3 and AXE75 v1, allowing an adjacent authenticated attacker to execute arbitrary code.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.01623 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420, 1.5.6 Build 20260623 +4 CWE-78
TI-2026-17831 CVE-2026-22221 · GHSA-f2x5-qvg5-jjpj

Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1

Priority MEDIUM 42

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1 allows adjacent authenticated attacker execute arbitrary code.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.01409 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420, (KR)_V1_1.2.2 Build 20260903 +2 CWE-78