CVE-2026-9030
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A denial-of-service vulnerability exists in the httpd service on Archer A6 v4 where the asynchronous systool instruction handling path does not properly synchronize or safely manage concurrent systool operations. Sending crafted systool instructions through the asynchronous request path may cause the httpd process or device management service to crash, resulting in temporary loss of access to the web management interface or device reboot.
Risk Assessment
The risk includes interruptions in device management access and possible reboots, affecting network continuity.
Recommendation
Upgrade the device firmware to a patched version. Monitor network traffic and restrict access to the device.
Original NVD description (English source)
A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly synchronize or safely manage concurrent systool operations. By sending crafted systool instructions through the asynchronous request path, successful exploitation may cause the httpd process or device management service to crash and may result in temporary loss of access to the web management interface or device reboot.