CVE-2026-15429

Katalog CVE

CVSS 8.8 · High EPSS 1,4%

Kerentanan Improper Neutralization of CRLF Sequences ('CRLF Injection') pada tp-link archer vx1800v firmware. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data.  An authenticated user with sufficient privileges may be able to modify account settings and gain elevated administrative privileges.

Rincian

Terbit di NVD

14 Juli 2026

Terakhir diubah

6 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.tp-link.com/us/support/faq/5189/ advisory vendor
• https://www.tp-link.com/en/support/download/archer-vx1800v/#Firmware product