CVE-2026-1571: Improper Neutralization of Input During Web Page Generation

User-controlled input is reflected into the HTML output without proper encoding on TP-Link Archer C60 v3, allowing arbitrary JavaScript execution via a crafted URL. An attacker could run script in the device web UI context, potentially enabling credential theft, session hijacking, or unintended...

TP-Link Archer C60 安全漏洞

The TP-Link Archer C60 is a wireless router produced by TP-Link Corporation. The TP-Link Archer C60 v3 has a security vulnerability. This vulnerability arises from the reflection of user inputs into the HTML output without proper encoding. This could allow for the execution of arbitrary JavaScrip...