CVE-2026-22227Disclosure(tp-link / archer_be230)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A command injection vulnerability may be exploited after the admin's authentication via the configuration backup restoration function of the TP-Link Archer BE230 v1.2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability. This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID. This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420.

tp-link CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://www.tp-link.com/us/support/faq/4935/

Other references

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

archer_be230
archer_be230_firmware

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

tp-link

Products

archer_be230archer_be230_firmware

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-22227

Full discourse1 post

CVE@CVEnew248d
Disclosure
CVE-2026-22227 A command injection vulnerability may be exploited after the admin's authentication via the configuration backup restoration function of the TP-Link Archer BE230 v1.2… https://www.cve.org/CVERecord?id=CVE-2026-22227
Post summary
A command injection flaw in TP‑Link Archer BE230 v1.2’s backup restoration function could be leveraged after admin authentication, with details provided but no exploitation or remediation information.
00000166
56.5K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tp-link	archer_be230	1.20	-	-
OS	tp-link	archer_be230_firmware	-	-	-

Explore more

Back to dashboard tp-link CVEs archer_be230 vulnerabilities