Command Injection Vulnerability in TP-Link Routers

CVE-2026-3227

What is CVE-2026-3227?

A command injection vulnerability has been detected in specific TP-Link router models, allowing an authenticated attacker to exploit the router's configuration import function. By uploading a specially crafted configuration file, attackers can execute OS commands with root privileges during the port-trigger processing phase. This can lead to complete compromise of the device, granting the attacker unauthorized control and access to sensitive information. Users are urged to apply available firmware patches to mitigate this security risk.

References