CVE-2026-22229
Gravedad CVSS v4.0:
ALTA
Tipo:
CWE-78
Neutralización incorrecta de elementos especiales usados en un comando de sistema operativo (Inyección de comando de sistema operativo)
Fecha de publicación:
02/02/2026
Última modificación:
02/02/2026
Descripción
*** Pendiente de traducción *** A command injection vulnerability may be exploited after the admin&#39;s authentication via the import of a crafted VPN client configuration file on the TP-Link Archer BE230 v1.2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.<br />
This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID. <br />
This issue affects Archer BE230 v1.2
Impacto
Puntuación base 4.0
8.60
Gravedad 4.0
ALTA