CVE-2026-5509Patch(tp-link / archer_be450)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch tp-link archer_be450 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1 router that allows an administrator to execute arbitrary system commands through the web management interface. After successfully authenticating to the admin interface, an attacker can leverage the browser’s developer console by supplying a crafted input that is passed to backend system commands without adequate sanitization. Successful exploitation enables execution of arbitrary commands with elevated privileges on the device, which may allow the attacker to start unauthorized services, modify system configuration, or otherwise fully compromise the router’s operating environment.

tp-link CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.tp-link.com/us/support/faq/5102/

Other references

Weakness type (CWE)

CWE-20CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

archer_be450
archer_be450_firmware
archer_be7200
archer_be7200_firmware

Threat summary

Patch or workaround signal is available
8 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 4 signals
Technical details provided in 5 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 3d ago at 4 mentions (2026-06-02); latest day: 1
8 total mentions across 5 days

Affected systems

Vendors

tp-link

Products

archer_be450archer_be450_firmwarearcher_be7200archer_be7200_firmware

1 version affected across 4 products

Deep dive

Activity timeline8 mentions / 5d

Signal classification3 categories

Patch

450.0%

Disclosure

337.5%

General

112.5%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-27	1	Disclosure1
2026-06-02	4	Disclosure1Patch3
2026-06-03	1	Patch1
2026-06-08	1	General1
2026-06-09	1	Disclosure1

Full discourse8 posts

yousukezan@yousukezan132d
Patch
TP-Link製ルーターの一部モデルで、任意コマンド実行につながる重大な脆弱性CVE-2026-5509が発見された。悪用されるとルーターが乗っ取られ、ネットワーク全体が危険にさらされる恐れがある。 CVE-2026-5509のCVSSスコアは8.5。対象はArcher BE450 v1およびArcher BE7200 v1で、管理画面にログインできる攻撃者が入力値の検証不備を悪用し、システムコマンドを実行できる。攻撃に成功すると、管理者権限で任意コマンドを実行できるため、不正サービスの起動や設定改ざん、通信の盗聴などが可能になる。企業ネットワークや家庭内ネットワークの中核機器であるルーターが侵害されることで、接続された端末全体へ影響が及ぶ可能性もある。 TP-Linkは修正版ファームウェアを公開済みで、Archer BE450およびBE7200の1.3.0 Build 20260416未満のバージョンが影響を受ける。利用者には速やかなファームウェア更新が推奨されている。 https://securityonline.info/tp-link-router-vulnerability-cve-2026-5509/
Post summary
TP‑Link has disclosed a critical command‑execution flaw (CVE‑2026‑5509) affecting Archer BE450/BE7200 routers, rated CVSS 8.5, and issued a firmware patch that users should apply immediately.
01422663.0K
14.5K followersView on X
Gray Hats@the_yellow_fall132d
Patch
A critical TP-Link router vulnerability affects Archer models. Download the latest CVE-2026-5509 patch immediately to secure your network environment. #TPLink #RouterSecurity #CVE20265509 #Cybersecurity #PatchTuesday https://securityonline.info/tp-link-router-vulnerability-cve-2026-5509/ https://t.co/tADKbqM4fz
Post summary
The post urges users to download the CVE-2026-5509 patch for TP-Link Archer routers, emphasizing it as a critical vulnerability.
00040245
12.5K followersView on X
iototsecnews@iototsecnews125d
Disclosure
TP-Link Router の脆弱性 CVE-2026-5509 が FIX：コマンド・インジェクションと管理者権限の奪取 https://iototsecnews.jp/2026/06/02/tp-link-router-security-bug-enables-remote-command-execution-attacks/ 今回の TP-Link ルーターに関する問題は、Web 管理インターフェイスにおける、ログイン後の入力値に対するサニタイズ処理の不足に起因します。管理者として認証されたユーザーが、ブラウザから送信するデータが、バックエンドの処理において適切に検証されない状態でシステム・レベルのコマンド実行へ渡されてしまう不備が存在していました。特権を持つ攻撃者が、細工された入力を送信することで、ルーターの組み込み OS の制御権を奪取し、任意のコマンド実行を引き起こす恐れがあります。ご利用のチームは、ご注意ください。 #Router #TPLink #Vulnerability
Post summary
The article discloses that TP‑Link routers have a post‑login sanitization flaw (CVE-2026-5509) enabling command injection and privilege escalation, but no PoC, exploit, or patch is provided.
02010239
495 followersView on X
Cyber Edition@CyberEdition131d
Patch
🛡️ TP-Link patched a high-severity flaw (CVE-2026-5509) affecting Archer BE450 and BE7200 routers. Attackers with admin access could execute system commands, hijack traffic, install backdoors, or take full control of the router. Update ASAP. https://thecyberedition.com/tp-link-router-remote-command-execution-vulnerability/ #TPLink
Post summary
The post announces that TP‑Link has patched a high‑severity vulnerability (CVE‑2026‑5509) affecting certain routers and urges immediate update.
0001268
728 followersView on X
CERT-PY@CERTpy125d
General
⚠️ Vulnerabilidad en productos TP-Link ❗ CVE-2026-5509 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-tp-link-4/ https://t.co/8diXxVGUEc
Post summary
The tweet announces CVE-2026-5509 affecting TP-Link products and links to external resources, but it provides no additional details such as PoC, exploitation status, patch information, or technical specifics.
0000085
6.7K followersView on X
Crypto Master💎 Arichain@Vijaykiran0987131d
Patch
Critical TP-Link Archer Router Flaw CVE-2026-5509 Patched: Update Now https://thecybrdef.com/critical-tp-link-archer-router-flaw-cve-2026-5509-patched-update-now/ #Cybertrending #Cybernewsdaily #Cybersecurity
Post summary
The article informs readers that the TP‑Link Archer router flaw CVE‑2026‑5509 has been patched and urges users to update their firmware. It lacks technical details or evidence of ongoing exploitation.
0000034
64 followersView on X
DailyCVE@dailycve131d
Disclosure
🔴 TP-Link Archer BE450/BE7200, Command Injection, #CVE-2026-5509 (Critical) -DC-Jun2026-112 https://dailycve.com/tp-link-archer-be450-be7200-command-injection-cve-2026-5509-critical-dc-jun2026-112/
Post summary
A critical command injection flaw (CVE‑2026‑5509) has been disclosed for TP‑Link Archer BE450/BE7200 routers.
0000049
209 followersView on X
CVE@CVEnew137d
Disclosure
CVE-2026-5509 An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1 router that allows an administrator to execute arbitrary system commands th… https://www.cve.org/CVERecord?id=CVE-2026-5509
Post summary
The text announces CVE-2026-5509, describing an authenticated command injection flaw that permits administrators to run arbitrary system commands on Archer BE450 v1 and BE7200 v1 routers. No proof of concept, exploit, patch, or active exploitation details are provided.
00000175
57.5K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tp-link	archer_be450	1.0	-	-
OS	tp-link	archer_be450_firmware	-	-	-
HW	tp-link	archer_be7200	1.0	-	-
OS	tp-link	archer_be7200_firmware	-	-	-

Explore more

Back to dashboard tp-link CVEs archer_be450 vulnerabilities

What researchers are saying

CVE-2026-5509

yousukezan[verified]@yousukezanPatch

TP‑Link has disclosed a critical command‑execution flaw (CVE‑2026‑5509) affecting Archer BE450/BE7200 routers, rated CVSS 8.5, and issued a firmware patch that users should apply immediately.

Gray Hats@the_yellow_fallPatch

The post urges users to download the CVE-2026-5509 patch for TP-Link Archer routers, emphasizing it as a critical vulnerability.

iototsecnews@iototsecnewsDisclosure

The article discloses that TP‑Link routers have a post‑login sanitization flaw (CVE-2026-5509) enabling command injection and privilege escalation, but no PoC, exploit, or patch is provided.

Cyber Edition@CyberEditionPatch

The post announces that TP‑Link has patched a high‑severity vulnerability (CVE‑2026‑5509) affecting certain routers and urges immediate update.

CERT-PY@CERTpyGeneral

The tweet announces CVE-2026-5509 affecting TP-Link products and links to external resources, but it provides no additional details such as PoC, exploitation status, patch information, or technical specifics.

Crypto Master💎 Arichain@Vijaykiran0987Patch

The article informs readers that the TP‑Link Archer router flaw CVE‑2026‑5509 has been patched and urges users to update their firmware. It lacks technical details or evidence of ongoing exploitation.

DailyCVE@dailycveDisclosure

A critical command injection flaw (CVE‑2026‑5509) has been disclosed for TP‑Link Archer BE450/BE7200 routers.

CVE@CVEnewDisclosure

The text announces CVE-2026-5509, describing an authenticated command injection flaw that permits administrators to run arbitrary system commands on Archer BE450 v1 and BE7200 v1 routers. No proof of concept, exploit, patch, or active exploitation details are provided.