CVE-2026-5511

LowCVSS 2.7/10Last modified Jul 24, 2026

Description

In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnostic command usage information. 

An authenticated attacker with administrative privileges could exploit this issue to confirm the presence of the diagnostic utility and view its valid command-line syntax and options.  The exposed information is limited in scope and does not include sensitive system data.

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-209

Affected software

No affected versions have been published.

Timeline

Published
May 19, 2026
Last modified
Jul 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-551106.1A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration CVE-2026-551117.5A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to accesCVE-2026-551128.8A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerCVE-2026-551137.5A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk ApplicatioCVE-2026-551148.8A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi NetworCVE-2026-551159.9A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect ApplicatCVE-2026-551169.8A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerabilityCVE-2026-551178.6A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files CVE-2026-551188.3A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerabilCVE-2026-551198.1A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk ACVE-2026-55124.3An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the nCVE-2026-551207.8Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-5511: Low severity, CVSS 2.7 | Vulnix