Archer AX90 v1 vulnerabilities

1 known vulnerability in Archer AX90 v1 from TP-Link. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  Archer AX90 v1: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-84682Oct 1, 2026TP-LinkEPSS 1.21%

  A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the setProductVer command handler to execute arbitrary operating system commands as root during device bo