CVE-2026-9151

CVE-2026-9151

An OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1. AX18 v1, and AX1300 v1.6 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device…

Vulnerability class: Command Injection (OS Command Injection)

Weakness classification (CWE)

References