Skip to content
OpenAdvisories
High · 7.1 CVE-2025-14631 EUVD-2026-1301GHSA-9688-9jmc-xf77

Null Pointer Dereference Vulnerability in Malformed 802.11 Frame of TP-Link Archer BE400

Published Jan 7, 2026 · Updated Jan 7, 2026 · Assigned by TPLink

Vendor: TP-Link Systems Product: Archer BE400 Category: Network devices

Description

A NULL Pointer Dereference vulnerability in TP-Link Archer BE400 V1(802.11 modules) allows 

an adjacent attacker to cause a denial-of-service (DoS) by triggering a device reboot.

This issue affects Archer BE400: xi 1.1.0 Build 20250710 rel.14914.

Affected products

VendorProductAffectedFixed
TP-Link Systems Archer BE400 ≤ 1.1.0 Build 20250710 rel.14914 —

References