TP-Link Systems Inc Archer BE3600 v1 vulnerabilities

2 CVEs affecting TP-Link Systems Inc Archer BE3600 v1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-78541, published 2026-08-24.

More from TP-Link Systems Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-9254, published 2026-08-24. High severity, CVSS 8.7. EPSS: 3.1% chance of exploitation in the next 30 days. An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special…
• CVE-2026-78541, published 2026-08-24. High severity, CVSS 8.5. EPSS: 2.3% chance of exploitation in the next 30 days. A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile…