PT-2026-5688
CVE-2026-22224
·
Published
2026-02-02
·
Updated
2026-02-03
Description by
CVSS 4.0
8.5
HighMetricsAV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Name of the Vulnerable Software and Affected Versions
TP-Link Archer BE230 versions prior to 1.2.4 Build 20251218 rel.70420
Description
A command injection may occur after administrative authentication within the cloud communication interface. Successful exploitation could grant an attacker full administrative control of the device, potentially compromising configuration integrity, network security, and service availability. This issue is one of several distinct command injection issues identified in separate code paths.
Recommendations
Update to version 1.2.4 Build 20251218 rel.70420 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾