Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(web modules) and Archer AXE75 v1.0 allows adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability. This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420 and Archer AXE v1.0 < 1.5.3 Build 20260209 rel. 71108.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-02-02 | 1 | Disclosure1 |
| 2026-02-04 | 1 | Patch1 |
| 2026-02-10 | 1 | Disclosure1 |
TP-Link社の無線LANルータArcher BE230でコマンドインジェクション脆弱性10件が修正。CVE-2026-0630、CVE-2026-0631、CVE-2026-22221からCVE-2026-22227、CVE-2026-22229。要認証だが機器の乗っ取り/rootへの昇格が可能。 https://securityonline.info/rooted-via-wi-fi-7-tp-link-patches-command-injection-in-archer-be230/
Post summary
TP‑Link Archer BE230 routers had ten command‑injection CVEs fixed; the exploits require authentication but could lead to root takeover.
⚠️ Vulnerabilidades en productos TP-Link ❗ CVE-2026-22229 ❗ CVE-2026-0631 ❗ CVE-2026-0630 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-tp-link-4/ https://t.co/KEt0W4QnLo
Post summary
The post announces three CVE vulnerabilities affecting TP‑Link products and directs readers to external links for additional details.
CVE-2026-0630 An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(web modules) allows adjacent authenticated attacker to execute arbitrary code. Successful exploit… https://www.cve.org/CVERecord?id=CVE-2026-0630
Post summary
The post announces an OS Command Injection vulnerability in TP‑Link Archer BE230 v1.2 that lets authenticated attackers run arbitrary code, with a note of a successful exploit but lacking PoC or patch info.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | archer_be230 | 1.20 | - | - |
| OS | tp-link | archer_be230_firmware | - | - | - |