Skip to content
OpenAdvisories

Product · TP-Link Systems

Archer BE3600 v1

6 known vulnerabilities.

Archer BE3600 v1 at a glance

Last 12 months
6
Critical · all time
0
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 4 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 2 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202620
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202640
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • High 8.5
    CVE-2026-78541

    Command Injection in Parent Control of TP-Link Archer BE3600 v1

    A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later process…

    TP-Link Systems Archer BE3600 v1 Network devices
  • High 8.7
    CVE-2026-9254 Public exploit

    Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices

    An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can in…

    TP-Link Systems Archer BE3600 v1 Archer BE800 V1 Archer AX75 V1 Network devices
  • High 7.0
    CVE-2025-62501

    SSH Hostkey Misconfiguration Vulnerability in Archer Devices

    SSH Hostkey misconfiguration vulnerability in Archer AX53 and Archer BE3600 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized access if captured creden…

    TP-Link Systems Archer AX53 v1.0 Archer BE3600 v1 Archer BE3600 v1.2 Network devices
  • High 8.5
    CVE-2026-22223

    Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1

    An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and BE3600 v1 (vpn modules) allows adjacent authenticated attacker execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, re…

    TP-Link Systems TP-Link System Archer BE3600 v1 Archer BE230 v1.2 Network devices
  • High 8.5
    CVE-2026-0631

    Authenticated Command Injection Vulnerability in Surfshark VPN Login in multiple Archer products

    An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1, AX10 v3 and AXE75 v1, allowing an adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an a…

    TP-Link Systems Archer BE230 v1.2 Archer BE3600 v1 Archer AX10 v3 Network devices
  • High 8.5
    CVE-2026-22221

    Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1

    An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1 allows adjacent authenticated attacker execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, res…

    TP-Link Systems Archer BE230 v1.2 Archer BE3600 v1 Network devices