Archer A6 V4
Monthly
Denial-of-service in the TP-Link Archer A6 V4 router's embedded web server allows an authenticated, adjacent-network attacker to crash the httpd process or the device by sending a malformed request to the HTTP-WRITEOEM handler, which fails to validate input before passing it to flash-write logic. All Archer A6 V4 firmware versions prior to V4_1.15.10 Build 260625 Rel.25447 are affected, per EUVD-2026-54656 and TP-Link's own advisory. No public exploit code or active exploitation has been identified at time of analysis.
Denial-of-service in the TP-Link Archer A6 v4 httpd service allows an adjacent, authenticated attacker to crash the web management process or force a device reboot by exploiting a race condition in the asynchronous systool instruction handling path. All firmware builds prior to V4_1.15.10 Build 260625 Rel.25447 are affected; a vendor-released patch has been issued. No public exploit code exists and the vulnerability is not listed in the CISA KEV catalog - real-world risk is constrained by the adjacent network and high-privilege prerequisites.
Denial-of-service in the TP-Link Archer A6 V4 router's embedded web server allows an authenticated, adjacent-network attacker to crash the httpd process or the device by sending a malformed request to the HTTP-WRITEOEM handler, which fails to validate input before passing it to flash-write logic. All Archer A6 V4 firmware versions prior to V4_1.15.10 Build 260625 Rel.25447 are affected, per EUVD-2026-54656 and TP-Link's own advisory. No public exploit code or active exploitation has been identified at time of analysis.
Denial-of-service in the TP-Link Archer A6 v4 httpd service allows an adjacent, authenticated attacker to crash the web management process or force a device reboot by exploiting a race condition in the asynchronous systool instruction handling path. All firmware builds prior to V4_1.15.10 Build 260625 Rel.25447 are affected; a vendor-released patch has been issued. No public exploit code exists and the vulnerability is not listed in the CISA KEV catalog - real-world risk is constrained by the adjacent network and high-privilege prerequisites.