CVE-2026-0631
HighCVSS 8.0Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
TP-Link Archer BE230 v1.2, BE3600 v1, and AXE75 v1 (OpenVPN modules) have an OS command injection vulnerability that allows an adjacent authenticated attacker to execute arbitrary code. Successful exploitation could give full administrative control of the device.
Risk Assessment
An attacker can gain full control of the router, potentially leading to compromise of configuration integrity, network security, and service availability.
Recommendation
Upgrade Archer BE230 firmware to version 1.2.4 Build 20251218 rel.70420 or later, and AXE75 to version 1.5.6 Build 20260623 or later. Restrict access to the admin panel and OpenVPN modules.
Other vulnerabilities in TP-Link Archer BE230
Original NVD description (English source)
An OS Command Injection vulnerability in OpenVPN modules in TP-Link Archer BE230 v1.2, BE3600v1 and AXE75 v1 allows an adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability. This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID. This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420 and Archer AXE75 v1 < 1.5.6 Build 20260623.