Cross-Site Scripting Vulnerability in TP-Link Archer C60 Router

CVE-2026-1571

What is CVE-2026-1571?

This vulnerability in the TP-Link Archer C60 v3 allows attackers to inject arbitrary JavaScript into the device's web interface through user-controlled input. By crafting malicious URLs, an attacker can exploit this weakness to execute scripts within the context of the router's UI. This can lead to serious security risks including credential theft, session hijacking, and executing unintended actions on behalf of authenticated users. Users are advised to apply the necessary firmware updates and follow the security guidelines provided by TP-Link.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References