CVE-2026-78541

HighCVSS 8.5/10Last modified Oct 12, 2026

Description

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report generation and may result in arbitrary command execution.

Successful exploitation may allow command execution on the affected device with potential impact to device confidentiality, integrity, and availability.

Metrics

CVSS 4.0 8.5/10CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-78

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
TP-Link Systems Inc.Archer BE3600 v1< 1.2.6 Build 20260617

References

Timeline

Published
Aug 24, 2026
Last modified
Oct 12, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-785437.5IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1CVE-2026-785457.2The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file. The unsCVE-2026-785464.8Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current CVE-2026-785474.4Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2CVE-2026-78557.2A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /tggl.asp of the compCVE-2026-785507.2The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SCVE-2026-785518.8RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid userCVE-2026-785524.9The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interCVE-2026-785537.0RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key file was created using CVE-2026-785559.4RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Although the interface dispCVE-2026-785567.4A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validCVE-2026-785578.3A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or