TP-Link Archer VX1800V Firmware vulnerabilities

3 CVEs affecting TP-Link Archer VX1800V Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15429, published 2026-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-15428, published 2026-07-14. High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days. An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain name parameter. An adjacent attacker who can access the relevant HTTP interface…
CVE-2026-15429, published 2026-07-14. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into…
CVE-2026-15427, published 2026-07-14. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input…