Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: TP-Link Systems Archer BE3600 V1 — tp-link.com/us/support/faq/5264 Clear all filters
TI-2026-54613 CVE-2026-78541 · GHSA-3p5q-gg9q-4336

Command Injection in Parent Control of TP-Link Archer BE3600 v1

Priority MEDIUM 43

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.0228 Published 2026-08-24 Fixed in 1.2.6 Build 20260617 CWE-78
TI-2026-08130 CVE-2026-9254 · GHSA-3h97-6772-mpj4

Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices

Priority MEDIUM 45

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain…

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.03055 Published 2026-08-24 Fixed in 1.4.2 Build 260708, 1.2.6 Build 20260617 +1 CWE-78