CVE-2026-15429

HighCVSS 8.8

Published: 14/07/2026(UTC)Updated: 06/08/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.84%

54th percentile - higher than 54% of all known CVEs

Summary

Risk Assessment

An authenticated user with sufficient privileges may be able to modify account settings and gain elevated administrative privileges, leading to full device compromise.

Recommendation

Immediately update the firmware of the Archer VX1800v v1 device to the latest version that fixes this vulnerability. Until the update, restrict access to the administrative panel to trusted IP addresses only.

Other vulnerabilities in Archer VX1800v

CVE-2026-15427High
An OS command injection vulnerability exists in the TR-069/CWMP management interface of Archer VX1800v v1 due to insufficient input validation, allowing crafted input to be executed as system-level commands.

Original NVD description (English source)

A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data. An authenticated user with sufficient privileges may be able to modify account settings and gain elevated administrative privileges.