Skip to main content

Archer C20 V6

3 CVEs product

Monthly

CVE-2026-75616 Aug 19, 20:44 HIGH PATCH This Week

OS command injection in the TP-Link Archer C20 v6 web management interface enables an authenticated administrator to execute arbitrary system commands by submitting crafted WAN configuration inputs that bypass insufficient input validation. Full device compromise - confidentiality, integrity, and availability - is achievable for all traffic routed through the affected device. TP-Link has released a patched firmware; no public exploit code or CISA KEV listing has been identified at time of analysis.

Command Injection Archer C20 V6 Tp Link Systems Inc
NVD
CVSS 4.0
8.5
EPSS
1.1%
CVE-2026-11834 Jun 22, 17:53 HIGH PATCH This Week

Command injection in TP-Link Archer and TL-MR series routers allows an adjacent unauthenticated attacker on the same broadcast domain to execute arbitrary commands with elevated privileges by supplying crafted DHCP option responses. The flaw resides in DHCP client option processing during device initialization and is most reliably triggered when the router is in factory-default or unconfigured state. No public exploit identified at time of analysis, but the vendor (TP-Link) has confirmed the issue and released firmware patches.

Command Injection TP-Link Archer Mr200 V07 Archer Mr200 V8 Archer Mr402 V1 +5
NVD VulDB
CVSS 4.0
8.7
EPSS
0.4%
CVE-2026-12001 Jul 27, 20:08 MEDIUM PATCH This Month

Hardcoded credentials in TP-Link router firmware allow attackers with physical access to gain unauthorized access to privileged functions, potentially leading to full device compromise. Affected models include TL-WR845N v4, TL-WR850N v3, Archer C20 v6, and Archer MR200 v5. No evidence of active exploitation or public exploit code exists at this time, and the physical access requirement limits remote exploitation risk.

Authentication Bypass TP-Link Tl Wr850N V3 Archer C20 V6 Tl Wr845N V4 +2
NVD
CVSS 4.0
5.2
EPSS
0.2%
EPSS 1% CVSS 8.5
HIGH PATCH This Week

OS command injection in the TP-Link Archer C20 v6 web management interface enables an authenticated administrator to execute arbitrary system commands by submitting crafted WAN configuration inputs that bypass insufficient input validation. Full device compromise - confidentiality, integrity, and availability - is achievable for all traffic routed through the affected device. TP-Link has released a patched firmware; no public exploit code or CISA KEV listing has been identified at time of analysis.

Command Injection Archer C20 V6 Tp Link Systems Inc
NVD
EPSS 0% CVSS 8.7
HIGH PATCH This Week

Command injection in TP-Link Archer and TL-MR series routers allows an adjacent unauthenticated attacker on the same broadcast domain to execute arbitrary commands with elevated privileges by supplying crafted DHCP option responses. The flaw resides in DHCP client option processing during device initialization and is most reliably triggered when the router is in factory-default or unconfigured state. No public exploit identified at time of analysis, but the vendor (TP-Link) has confirmed the issue and released firmware patches.

Command Injection TP-Link Archer Mr200 V07 +7
NVD VulDB
EPSS 0% CVSS 5.2
MEDIUM PATCH This Month

Hardcoded credentials in TP-Link router firmware allow attackers with physical access to gain unauthorized access to privileged functions, potentially leading to full device compromise. Affected models include TL-WR845N v4, TL-WR850N v3, Archer C20 v6, and Archer MR200 v5. No evidence of active exploitation or public exploit code exists at this time, and the physical access requirement limits remote exploitation risk.

Authentication Bypass TP-Link Tl Wr850N V3 +4
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy