CVE-2026-15427

HighCVSS 8.1

Published: 14/07/2026(UTC)Updated: 06/08/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.55%

43th percentile - higher than 43% of all known CVEs

Summary

An OS command injection vulnerability exists in the TR-069/CWMP management interface of Archer VX1800v v1 due to insufficient input validation, allowing crafted input to be executed as system-level commands.

Risk Assessment

Successful exploitation may allow arbitrary command execution with root privileges, resulting in complete compromise of the device. The attack requires specific conditions such as TR-069 being enabled and ability to influence ACS-delivered commands.

Recommendation

Immediately update the Archer VX1800v v1 firmware to the latest version that addresses this vulnerability. Additionally, restrict access to the TR-069 interface and monitor communication with the ACS server.

Other vulnerabilities in Archer VX1800v

CVE-2026-15429High
A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data.

Original NVD description (English source)

An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input to be executed as system-level commands. Exploitation requires specific conditions such as TR-069 being enabled and ability to influence ACS-delivered commands, compromise or control an ACS server. Successful exploitation may allow arbitrary command execution with root privileges, resulting in complete compromise of the device.