OS Command Injection Vulnerability in TP-Link Archer BE230 by TP-Link

CVE-2026-22222

What is CVE-2026-22222?

An OS Command Injection vulnerability has been identified in the TP-Link Archer BE230 v1.2, specifically affecting its web modules. This flaw permits an adjacent authenticated attacker to exploit the device by executing arbitrary commands. The consequences of a successful attack are significant, potentially granting the attacker full administrative control, thereby compromising the integrity of the device's configuration, undermining network security, and affecting the availability of services. This issue reflects one of several OS command injection vulnerabilities found within the product, each documented independently.

References