EUVD-2026-116533

An authenticated OS command injection vulnerability exists in the Offline Download component USB storage allocation of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly...

CVE-2026-118865

An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of the Archer AX3000 v2 . The issue occurs because the software fails to properly neutralize shell metacharacters in a crafted path value before passing it to a system command whe...