Archer BE800 V1 vulnerabilities

2 known vulnerabilities in Archer BE800 V1 from TP-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Archer BE800 V1: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-9254Aug 24, 2026TP-LinkEPSS 3.06%

  An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inj

• 8.5 High severity

  Archer BE800 v1: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-16348Aug 24, 2026TP-LinkEPSS 2.15%

  An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation