CVE-2026-10562
Gravedad CVSS v4.0:
MEDIA
Tipo:
CWE-601
Redireccionamiento de URL a sitio no confiable (Open Redirect)
Fecha de publicación:
30/06/2026
Última modificación:
02/07/2026
Descripción
*** Pendiente de traducción *** An<br />
unauthenticated URL redirection vulnerability has been identified in Archer<br />
AX20 V2 due to improper validation of user-supplied URL input within the web<br />
interface. An unauthenticated attacker<br />
can craft URLs containing URL-encoded path traversal sequences.<br />
<br />
<br />
<br />
<br />
<br />
When<br />
processed by the embedded web server, these inputs may cause the device to<br />
respond with HTTP 3xx redirects to attacker-controlled external domains.<br />
<br />
<br />
<br />
This issue affects Archer AX20 V2.0: through 2.1.9 Build 20230829.
Impacto
Puntuación base 4.0
5.90
Gravedad 4.0
MEDIA