PT-2026-58110 · Tp Link Systems · Archer Vx1800V V1

Klamm9 · Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-15428

Mitre

CVSS v4.0

8.5

Alta

Vetor base

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain name parameter. An adjacent attacker who can access the relevant HTTP interface can modify the parameter to inject shell metacharacters, resulting in arbitrary code execution with root privileges.

Successful exploitation may allow remote code execution and complete compromise of the device.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-15428

Produtos afetados

Archer Vx1800V V1

Referências · 3

• https://tp-link.com/us/support/faq/5189 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-15428 · Nota de Segurança
• https://tp-link.com/en/support/download/archer-vx1800v/#Firmware · Correção