CVE-2026-0631
Authenticated Command Injection Vulnerability in Surfshark VPN Login in Archer BE230, BE3600 and AXE75
CVSS score
8.5
EPSS probability
%1.6
Risk score
0.1
Published
8 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2021-41653Code injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:3EPSS %76
9.8
CVE-2022-25061OS command injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:3EPSS %59
7.2
CVE-2025-9377 Actively exploitedOS command injection in Tp Link Tl Wr841n
WorkaroundEPSS %38
9.8
CVE-2022-25060OS command injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:2EPSS %40
9.8
CVE-2022-25064OS command injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:3EPSS %36
8.8
CVE-2022-30075Vulnerability in Tp Link Archer Ax50 Firmware
Patch status unknown Public Exploits:7EPSS %35
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-0631"