TP-Link Systems Inc Archer a6 v4 vulnerabilities

2 CVEs affecting TP-Link Systems Inc Archer a6 v4, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9031, published 2026-08-07.

More from TP-Link Systems Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-9031, published 2026-08-07. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write…
• CVE-2026-9030, published 2026-08-07. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly synchronize or safely manage concurrent…