CVE-2026-5511
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles user input, exposing diagnostic command syntax information.
Risk Assessment
An authenticated attacker with administrative privileges can confirm the presence of the diagnostic utility and learn its valid syntax, potentially aiding further attacks.
Recommendation
Apply a router firmware update that fixes input handling in the network diagnostic feature.
Original NVD description (English source)
In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnostic command usage information. An authenticated attacker with administrative privileges could exploit this issue to confirm the presence of the diagnostic utility and view its valid command-line syntax and options. The exposed information is limited in scope and does not include sensitive system data.