Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-9031 EUVD-2026-54656GHSA-7f4x-hjwm-h5px

Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6

Published Aug 7, 2026 · Updated Aug 10, 2026 · Assigned by TPLink

Description

An input validation
vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation
of user-supplied data before it is processed by internal flash-write handling
logic.

Successful
exploitation may cause httpd process or device to crash, resulting in loss of access
to the web interface and a denial-of-service condition.

Affected products

VendorProductAffectedFixed
TP-Link Systems Archer A6 v4 < V4_1.15.10 Build 260625 Rel.25447 V4_1.15.10 Build 260625 Rel.25447

References