PT-2026-5691 · Tp Link · Archer Be230

Published 2025-12-19 · Updated 2026-02-02 · CVE-2026-22227

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions TP-Link Archer BE230 versions prior to 1.2.4 Build 20251218 rel.70420

Description A command injection may occur after administrative authentication through the configuration backup restoration function. Successful exploitation could grant an attacker full administrative control, compromising configuration integrity, network security, and service availability. This issue is one of several distinct command injection flaws identified in separate code paths. The vulnerability is triggered via the configuration backup restoration function.

Recommendations Update to version 1.2.4 Build 20251218 rel.70420 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2026-02139

CVE-2026-22227

Affected Products

Archer Be230

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-22227 · Security Note
• https://tp-link.com/us/support/download/archer-be230/v1.20/#Firmware · Patch
• https://bdu.fstec.ru/vul/2026-02139 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22227 · Vendor Advisory
• https://tp-link.com/en/support/download/archer-be230/v1.20/#Firmware · Patch
• https://tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware · Patch
• https://t.me/CVEtracker/43531 · Telegram Post
• https://twitter.com/CVEnew/status/2018465539828404308 · Twitter Post
• https://tp-link.com/us/support/faq/4935 · Vendor Advisory, Patch