CVE-2026-22227
Gravedad CVSS v4.0:
ALTA
Tipo:
CWE-78
Neutralización incorrecta de elementos especiales usados en un comando de sistema operativo (Inyección de comando de sistema operativo)
Fecha de publicación:
02/02/2026
Última modificación:
02/02/2026
Descripción
*** Pendiente de traducción *** A command injection vulnerability may be exploited after the admin&#39;s authentication via the configuration backup restoration function of the TP-Link Archer BE230 v1.2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.<br />
<br />
<br />
This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.<br />
<br />
<br />
This issue affects Archer BE230 v1.2
Impacto
Puntuación base 4.0
8.50
Gravedad 4.0
ALTA