PT-2026-6103 · Tp Link · Archer Be230

Zeix · Published 2026-02-03 · Updated 2026-02-03 · CVE-2026-22220

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TP-Link Archer BE230 versions prior to 1.2.4 Build 20251218 rel.70420

Description A lack of proper input validation in the HTTP processing path within the web modules may allow a crafted request to cause the device’s web service to become unresponsive, leading to a denial of service. A network adjacent attacker with high privileges could cause the device’s web interface to temporarily stop responding until it recovers or is rebooted.

Recommendations Update to version 1.2.4 Build 20251218 rel.70420 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-22220

Affected Products

Archer Be230

References · 7

• https://tp-link.com/us/support/faq/4941 · Vendor Advisory
• https://tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware · Patch
• https://osv.dev/vulnerability/CVE-2026-22220 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22220 · Security Note
• https://tp-link.com/us/support/download/archer-be230/v1.20/#Firmware · Patch
• https://tp-link.com/en/support/download/archer-be230/v1.20/#Firmware · Patch
• https://t.me/CVEtracker/43627 · Telegram Post