CVE-2026-11834
Gravedad CVSS v4.0:
ALTA
Tipo:
CWE-78
Neutralización incorrecta de elementos especiales usados en un comando de sistema operativo (Inyección de comando de sistema operativo)
Fecha de publicación:
22/06/2026
Última modificación:
26/06/2026
Descripción
*** Pendiente de traducción *** A command<br />
injection vulnerability has been identified in the DHCP option processing logic<br />
in multiple TP-Link router models, due to insufficient validation of externally<br />
supplied DHCP option data. An adjacent attacker may exploit this<br />
vulnerability by supplying crafted DHCP responses, potentially resulting in unauthorized<br />
command execution during device initialization or provisioning workflows. This<br />
typically occurs when the device is in a factory-default or unconfigured state.<br />
<br />
<br />
<br />
<br />
<br />
Successful<br />
exploitation may allow an adjacent, unauthenticated attacker to execute<br />
arbitrary commands with elevated privileges, potentially leading to full<br />
compromise of the affected device and unauthorized administrative control.
Impacto
Puntuación base 4.0
8.70
Gravedad 4.0
ALTA
Referencias a soluciones, herramientas e información
- https://mattg.systems/posts/cve-2026-11834/
- https://www.tp-link.com/en/support/download/archer-c20/
- https://www.tp-link.com/en/support/download/archer-mr200/#Firmware
- https://www.tp-link.com/en/support/download/archer-mr402/#Firmware
- https://www.tp-link.com/en/support/download/archer-vr2100/#Firmware
- https://www.tp-link.com/en/support/download/tl-mr6400/v7/#Firmware
- https://www.tp-link.com/us/support/download/archer-c20/
- https://www.tp-link.com/us/support/faq/5141/