PT-2026-53984
CVE-2026-10562
·
Published
2026-06-30
·
Updated
2026-06-30
Description by
CVSS 4.0
5.9
MediumMetricsAV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
Archer AX20 V2 versions 2.0 through 2.1.9 Build 20230829
Description
An unauthenticated URL redirection issue exists due to improper validation of user-supplied URL input within the web interface. An attacker can use URL-encoded path traversal sequences to force the embedded web server to issue HTTP 3xx redirects to external domains under the attacker's control.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾