Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-9031

Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6

Description

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Successful exploitation may cause httpd process or device to crash, resulting in loss of access to the web interface and a denial-of-service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TP-Link Systems Inc. Archer A6 v4

Default version status: unaffected

  • 0 to < V4_1.15.10 Build 260625 Rel.25447affected

References