Vulnerability in Tp-link Systems Inc. Archer A6 V4

CVE-2026-9030

A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly synchronize or safely manage concurrent systool operations. By sending craf…

Vulnerability class: Race Condition

Affected products

Tp-link Systems Inc. Archer A6 V4 — versions 0

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

References

f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory)