CVE-2026-15428

Name of the Vulnerable Software and Affected Versions Archer VX800v version 1

Description An OS command injection issue exists due to insufficient input sanitization of the domain name parameter. An adjacent attacker with access to the HTTP interface can inject shell metacharacters into the domain name parameter, leading to arbitrary code execution with root privileges and complete compromise of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.