CVE-2026-0631

high

An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1, AX10 v3 and AXE75 v1, allowing an…

Vendor / product: Tp-link — archer be230 firmware

An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1, AX10 v3 and AXE75 v1, allowing an adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability. This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID. This issue affects Archer BE230 v1.2

CVSS

8.0

8.0 (CVSS v3.1)

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity source: NVD CVSS v3.1 (nvd@nist.gov)

Timeline (UTC)

Published: 2026-02-02 18:16

Modified: 2026-10-28 22:17

NVD status: Modified

Last synced 8 hours ago

Verified against the source API 2026-10-28 22:34 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

tp-link / archer_be230_firmware <1.2.4

Weakness classification (CWE)

CWE-78

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: https://www.tp-link.com/us/support/faq/4935/

Patch / mitigation: https://www.tp-link.com/us/support/faq/4935/

References

https://www.tp-link.com/en/support/download/archer-ax10/v3/#Firmware f23511db-6c3e-4e32-a477-6aa17d310630
https://www.tp-link.com/en/support/download/archer-axe75/v1/#Firmware f23511db-6c3e-4e32-a477-6aa17d310630
https://www.tp-link.com/en/support/download/archer-be230/v1.20/#Firmware f23511db-6c3e-4e32-a477-6aa17d310630
https://www.tp-link.com/en/support/download/archer-be3600/v1/#Firmware f23511db-6c3e-4e32-a477-6aa17d310630
https://www.tp-link.com/kr/support/download/archer-be3600/v1/#Firmware f23511db-6c3e-4e32-a477-6aa17d310630
https://www.tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware f23511db-6c3e-4e32-a477-6aa17d310630
https://www.tp-link.com/us/support/download/archer-ax10/v3/#Firmware f23511db-6c3e-4e32-a477-6aa17d310630
https://www.tp-link.com/us/support/download/archer-axe75/v1/#Firmware f23511db-6c3e-4e32-a477-6aa17d310630
https://www.tp-link.com/us/support/download/archer-be230/v1.20/#Firmware f23511db-6c3e-4e32-a477-6aa17d310630
https://www.tp-link.com/us/support/download/archer-be3600/v1.26/#Firmware f23511db-6c3e-4e32-a477-6aa17d310630
https://www.tp-link.com/us/support/faq/4935/ f23511db-6c3e-4e32-a477-6aa17d310630

Data sources

NVD CVE API 2.0 — fetched 2026-10-28 22:34 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

CVE-2026-0631

Affected products

Weakness classification (CWE)

Mitigation & advisories

References

Data sources

Learn the basics

Related CVEs