TP-Link Systems Inc Archer BE800 v1 vulnerabilities

2 CVEs affecting TP-Link Systems Inc Archer BE800 v1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9254, published 2026-08-24.

More from TP-Link Systems Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-9254, published 2026-08-24. High severity, CVSS 8.7. EPSS: 3.1% chance of exploitation in the next 30 days. An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special…
• CVE-2026-16348, published 2026-08-24. High severity, CVSS 8.5. EPSS: 2% chance of exploitation in the next 30 days. An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell…