Skip to content
OpenAdvisories

Product · TP-Link Systems

Archer BE800 V1

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-16348 Public exploit

    Command Injection Vulnerability in VPN connection of Archer BE800

    An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection.  Successful exploitatio…

  • High 8.7
    CVE-2026-9254 Public exploit

    Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices

    An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can in…