CVE-2026-9151 Command Injection Vulnerability in OpenVPN on Multiple TP-Link Archer Routers

An OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1. AX18 v1, and AX1300 v1.6 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration...

The vulnerability of the CWMP/TR-069 protocol implementation in TP-Link’s AX10 and AX1500 router software allows a attacker to execute arbitrary code.

The vulnerability of the CWMP/TR-069 protocol implementation for TP-Link AX10 and AX1500 routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted CWMP binary...

PT-2024-9110

Name of the Vulnerable Software and Affected Versions TP-Link Archer Series routers TP-Link Deco Series routers TP-Link Tapo Series routers Description An authenticated remote code execution RCE issue exists in the tmp get sites function of the HomeShield functionality provided by TP-Link. This...