Command Injection Vulnerability in TP-Link Archer BE230 Device
CVE-2026-22227
8.5HIGH
Key Information:
- Vendor
Tp-link Systems Inc.
- Status
- Vendor
- CVE Published:
- 2 February 2026
What is CVE-2026-22227?
A security flaw in the TP-Link Archer BE230 v1.2 allows for command injection via the configuration backup restoration function, which is accessible post-authentication by an admin. This vulnerability could be exploited by an attacker to seize total administrative control of the device, jeopardizing the integrity of the device's configuration, the security of the network, and the availability of related services.
Affected Version(s)
Archer BE230 v1.2 0 < 1.2.4 Build 20251218 rel.70420