CVE-2026-5509

Name of the Vulnerable Software and Affected Versions Archer BE450 v1 Archer BE7200 v1

Description An authenticated command injection allows an administrator to execute arbitrary system commands through the web management interface. By using the browser developer console, a crafted input can be supplied that is passed to backend system commands without adequate sanitization. Successful exploitation enables the execution of commands with elevated privileges, potentially allowing the attacker to start unauthorized services, modify system configuration, or fully compromise the router operating environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.