CVE-2026-78541
Command Injection in Parent Control of TP-Link Archer BE3600 v1
CVSS score
8.5
EPSS probability
%2.3
Risk score
0.2
Published
1 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More
The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional. Elsewhere, fake apps, helpful support calls, cheap banking kits, exposed systems, and weak defaults kept
Similar Vulnerabilities
9.3
CVE-2026-19586Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways
Patch verified Public Exploits:1EPSS %6
7.7
CVE-2026-17176OS Command Injection Vulnerability in Deco Devices
Patch verifiedEPSS %5
8.7
CVE-2026-9254Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices
Patch verified Public Exploits:1EPSS %3
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-78541"