Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-22221

Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1

CVSS 4.0 8.5 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-22221

Published

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1 allows adjacent authenticated attacker execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability. This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID. This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-22221

Published

Archer BE230 v1.2

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "Archer BE230 v1.2",
                    "modules": [
                        "vpn"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.2.4 Build 20251218 rel.70420",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Archer BE3600 V1

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "TP-Link Systems Inc",
                    "product": "Archer BE3600 V1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "(KR)_V1_1.2.2 Build 20260903",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "(EU)_V1_1.2.6 Build 20260617",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "(USW)_V1.26_1.2.6 Build 20260617",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON