Lucene search
+L

7 matches found

Kitploit
Kitploit
•added 2026/10/08 5:22 p.m.•21 views

CVE-2026-16348

TP-Link Archer BE800 V1 — Authenticated RCE via VPN Key Injection CVE: CVE-2026-16348 CVSS: 8.5 High — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L Auth required: Valid admin credentials Network position: Network remote if management interface exposed Summary The VPN server...

8.5CVSS6.3AI score0.01956EPSS
SaveExploits1
GithubExploit
GithubExploit
•added 2026/08/25 2:56 a.m.•44 views

Exploit for CVE-2026-16348

CVE-2026-16348 TP-Link Archer BE800 V1 — Authenticated RCE v...

8.5CVSS5.7AI score0.01956EPSS
SaveExploits1
Cvelist
Cvelist
•added 2026/08/24 5:25 p.m.•45 views

CVE-2026-16348 Command Injection Vulnerability in VPN connection of Archer BE800

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

8.5CVSS0.01956EPSS
SaveExploits1References3
CVE
CVE
•added 2026/08/24 5:25 p.m.•92 views

CVE-2026-16348

TP-Link Archer BE800 V1 is affected by an authenticated command injection in its VPN connection handling. An attacker with administrative access can inject shell metacharacters via the VPN connection to execute arbitrary system commands with root privileges . Successful exploitation may enable pe...

8.5CVSS6.6AI score0.01956EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/08/24 5:25 p.m.•15 views

EUVD-2026-65007

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

8.5CVSS6AI score0.01956EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•6 views

CVE-2026-16348: Improper Neutralization of Special Elements used in an OS Command

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

8.5CVSS6.3AI score0.01956EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•23 views

PT-2026-80979

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

8.5CVSS6AI score0.01956EPSS
SaveExploits1References5
Rows per page
Query Builder