CVE-2026-17176— OS command injection Vulnerability in Deco BE11000
Quick assessment
Affected
TP-Link Systems Inc. Deco BE11000 V2
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
TP-Link Deco BE11000 的 TDDP 模块中存在一个操作系统命令注入漏洞。同一网络内的攻击者可通过发送精心构造的 UDP 数据包，以 root 权限执行任意命令。 若成功利用该漏洞，可能导致设备被完全攻陷，包括：未经授权的命令执行、设备设置被篡改，以及机密性、完整性和可用性的丧失。
Possible ATT&CK Techniques 3 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application T1210 · Exploitation of Remote Services
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-17176
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OS command injection Vulnerability in Deco BE11000
Source: CVE Program / CVE List V5
Vulnerability Description
An OS
command injection vulnerability in the TDDP module of Deco BE11000 allows an
adjacent network attacker to execute arbitrary commands with root privileges by
sending a crafted UDP packet.
Successful exploitation may lead to complete
device compromise, including unauthorized command execution, modification of
device settings, and loss of confidentiality, integrity, and availability
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TP-Link Systems Inc. | Deco BE11000 V2 | 0 ~ 1.3.5 Build 26071712 | - |
|
II. Public POCs for CVE-2026-17176
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-17176
请登录查看更多情报信息。
Other References for CVE-2026-17176 (2)
Same Patch Batch · TP-Link Systems Inc. · 2026-09-10 · 4 CVEs total
| CVE-2026-84941 | 6.9 MEDIUM | Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading |
| CVE-2026-76653 | 5.3 MEDIUM | Missing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR6 |
| CVE-2026-76652 | 4.8 MEDIUM | Authenticated Directory Traversal Vulnerability in File Upload Functionality in TP-Link TL |
IV. Related Vulnerabilities
Same vendor: TP-Link Systems Inc.
-
CVE-2026-84941
Omada Controller XML External Entity (XXE) Injection in SAML -
CVE-2026-76652
Authenticated Directory Traversal Vulnerability in File Uplo -
CVE-2026-76653
Missing Authentication in VPN Configuration Management in TP -
CVE-2026-85384
Authenticated Stack-Based Buffer Overflow in RE210 AC750 Con -
CVE-2026-18167
Stack-based buffer overflow in TP-Link Archer AX55 v4
Same weakness: CWE-78
-
CVE-2026-78569
Langflow is vulnerable to arbitrary code execution due to mu -
CVE-2026-78575
Langflow is vulnerable to arbitrary code execution due to mu -
CVE-2026-79724
Langflow is vulnerable to arbitrary code execution due to mu -
CVE-2026-81550
DataStage on Cloud Pak for Data has several vulnerabilities -
CVE-2026-82095
DataStage on Cloud Pak for Data has several vulnerabilities
V. Comments for CVE-2026-17176
No comments yet