CVE-2026-75616— Command Injection in Router Web Management Interface
Quick assessment
Affected
TP-Link Systems Inc. Archer C20 v6
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Archer C20 v6 固件的 Web 管理接口在处理某些与 WAN 相关的配置操作时存在 OS 命令注入漏洞。经过身份验证的管理员可通过利用输入验证不足的问题，执行任意系统命令，可能导致设备被完全控制。 成功利用该漏洞后，攻击者可以以高权限执行任意命令，从而破坏受影响设备及其流经的网络流量的机密性、完整性和可用性。
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| TP-Link Systems Inc. | Archer C20 v6 | < EU_0.9.1 Build 260811 |
affected |
< US_0.9.1 Build 260812 |
affected | ||
< RU_0.9.1 Build 260812 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-75616
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Command Injection in Router Web Management Interface
Source: CVE Program / CVE List V5
Vulnerability Description
An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticated administrator may exploit insufficient input validation to execute arbitrary system commands, potentially resulting in full device compromise.
Successful exploitation may allow arbitrary command execution with elevated privileges, compromising the confidentiality, integrity, and availability of the affected device and network traffic passing through it.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TP-Link Systems Inc. | Archer C20 v6 | 0 ~ EU_0.9.1 Build 260811 | - |
|
II. Public POCs for CVE-2026-75616
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-75616
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-75616 (1)
Vendor Pages for CVE-2026-75616 (1)
Same Patch Batch · TP-Link Systems Inc. · 2026-08-19 · 4 CVEs total
| CVE-2026-75618 | 7.1 HIGH | RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C10 |
| CVE-2026-8619 | 7.1 HIGH | Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR |
| CVE-2026-75619 | 6.9 MEDIUM | RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101 |
IV. Related Vulnerabilities
Same vendor: TP-Link Systems Inc.
-
CVE-2026-17252
Unauthenticated Denial of Service via Composed HTTP Parsing -
CVE-2026-17251
Unauthenticated Denial of Service via Null Pointer Dereferen -
CVE-2026-17250
Authenticated Remote Code Execution via Stack-Based Buffer O -
CVE-2026-19683
Unencrypted Credential Transmission in Omada Gateway Dynamic -
CVE-2026-19586
Pre-Authentication OS Command Injection in Omada Gateways on
Same weakness: CWE-78
-
CVE-2026-57998
better-npm-audit OS Command Injection via registry flag -
CVE-2026-41451
UAC < 3.3.0 Command Injection via User Substitution in parse -
CVE-2026-41450
UAC < 3.3.0 Command Injection via command_collector.sh -
CVE-2026-41449
UAC < 3.3.0 Command Injection via run_command.sh -
CVE-2026-47359
Apache CloudStack: OS Command Injection due to unsanitized m
V. Comments for CVE-2026-75616
No comments yet