FR
live
High CVSS 8

CVE-2026-9044

Tp-link Archer Axe75 Firmware

An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper filtering of special characters.  Successful exploitation of this vulnerability may enable an attacker to gain full control of the affected device, potentially compromising configuration integrity, network security, and service availability.

What this means

Exposure
Exploitable from the adjacent network, with an ordinary user account and with no action from the victim.
Impact
An attacker can read sensitive data, modify or destroy data and take the service offline.
Weakness
Unfiltered input reaches the system shell, letting the attacker run their own commands on the server.
Likelihood
Its EPSS score puts short-term exploitation in a middle band: neither negligible nor imminent.

What to doFold into the next patch cycle.

Read automatically from the CVSS vector, the weakness type (CWE) and the EPSS score. The technical description above remains the one published by NIST.

Published
31 July 2026
CVSS
8 (v3.1) CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
1.16% probability of exploitation within 30 days · above 65% of all CVEs
Weakness
CWE-78
Sources
nvd
References

Type at least two characters.

navigate open esc dismiss