RCE in TP-Link Archer Axe75
CVE-2026-9044
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper filtering of special characters. Successful exploitation of this vulnerability may enable an attacker to gain full control of the affected device, potentially compromising configuration integrity, network security, and service availability.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.012 (65.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Tp-link Archer_axe75 — versions 1.0
- Tp-link Archer_axe75_firmware
- Tp-link Systems Inc. Axe75 V1 — versions 0
Weakness classification (CWE)
References
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory, Vendor Advisory)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
Frequently asked questions
- What is CVE-2026-9044?
- CVE-2026-9044 is a high-severity vulnerability in TP-Link Archer Axe75, classified under OS Command Injection. CVSS score: 8.0/10. Published 2026-07-31.
- How severe is CVE-2026-9044?
- High severity. CVSS v3 base score is 8.0 out of 10.