CVE-2026-22221
Gravedad CVSS v4.0:
ALTA
Tipo:
CWE-78
Neutralización incorrecta de elementos especiales usados en un comando de sistema operativo (Inyección de comando de sistema operativo)
Fecha de publicación:
02/02/2026
Última modificación:
02/02/2026
Descripción
*** Pendiente de traducción *** An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) allows adjacent <br />
<br />
authenticated <br />
<br />
attacker <br />
<br />
execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.<br />
<br />
This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.This issue affects Archer BE230 v1.2
Impacto
Puntuación base 4.0
8.50
Gravedad 4.0
ALTA