CVE-2026-9030

Name of the Vulnerable Software and Affected Versions Archer A6 v4

Description A denial-of-service issue exists in the httpd service. The asynchronous systool instruction handling path fails to properly synchronize or safely manage concurrent systool operations. An authenticated attacker can send crafted systool instructions through the asynchronous request path, which may cause the httpd process or device management service to crash. This can lead to a device reboot or a temporary loss of access to the web management interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.