Denial-of-Service Vulnerability in Archer A6 v4 httpd Service by TP-Link

CVE-2026-9030

What is CVE-2026-9030?

A vulnerability in the httpd service of the Archer A6 v4 router allows for denial-of-service attacks due to improper management of concurrent systool operations. By sending specifically crafted systool instructions through an asynchronous request path, an attacker may exploit this weakness to crash the httpd process or the device management service. This can lead to a temporary loss of access to the web management interface or even result in the device rebooting, which poses a significant risk for users relying on this router for network stability.

References