CVEvulnerability
CVE-2026-9151
8.5 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2026-06-10
- Last modified
- 2026-06-17
- Assigner
- f23511db-6c3e-4e32-a477-6aa17d310630
- CVSS 4.0 (f23511db-6c3e-4e32-a477-6aa17d310630)
- 8.5 HIGH — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weaknesses
- CWE-78
Description
An OS
command injection vulnerability exists in the VPN module of TP-Link Archer AX12
v1, AX17 v1. AX18 v1, and AX1300 v1.6 routers. This vulnerability allows an
adjacent, authenticated attacker to execute arbitrary commands on the device by
importing a specially crafted VPN client configuration file. The issue stems
from improper filtering of special characters.
Successful
exploitation of this vulnerability may enable an attacker to gain full control
of the affected device, potentially compromising configuration integrity,
network security, and service availability.
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://www.tp-link.com/en/support/download/archer-ax12/#Firmware www.tp-link.com
- https://www.tp-link.com/en/support/download/archer-ax17/#Firmware www.tp-link.com
- https://www.tp-link.com/en/support/download/archer-ax18/#Firmware www.tp-link.com
- https://www.tp-link.com/us/support/download/archer-ax1300/#Firmware www.tp-link.com
- https://www.tp-link.com/us/support/faq/5125/ www.tp-link.com