CVE-2026-75616

Awaiting Analysis Awaiting Analysis - Queue

Command Injection in TP-Link Archer C20 v6 Firmware

Publication date: 2026-08-19

Last updated on: 2026-08-28

Assigner: TPLink

Description

An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticated administrator may exploit insufficient input validation to execute arbitrary system commands, potentially resulting in full device compromise. Successful exploitation may allow arbitrary command execution with elevated privileges, compromising the confidentiality, integrity, and availability of the affected device and network traffic passing through it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-28

Generated

2026-09-09

AI Q&A

2026-08-20

EPSS Evaluated

2026-09-07

NVD

CVE-2026-75616

Affected Vendors & Products

Vendor	Product	Version / Range
tp-link	archer_c20	6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This is an OS command injection vulnerability in the web management interface of TP-Link Archer C20 v6 firmware. It occurs when processing WAN-related configuration operations. An authenticated administrator can exploit insufficient input validation to execute arbitrary system commands, potentially leading to full device compromise.

Detection Guidance

Detection of this vulnerability requires checking for unauthorized command execution attempts on the Archer C20 v6 device. Monitor network traffic for suspicious WAN configuration requests to the device's web interface. Inspect system logs for unusual commands executed on the device. No specific commands are provided in the given context.

Impact Analysis

Successful exploitation may allow attackers to execute arbitrary commands with elevated privileges. This could compromise the device's confidentiality, integrity, and availability, as well as network traffic passing through it. Attackers might gain full control over the device and the network.

Compliance Impact

This vulnerability could potentially impact compliance with standards like GDPR and HIPAA by compromising the confidentiality, integrity, and availability of network traffic passing through the affected device. Unauthorized command execution may lead to data breaches or unauthorized access to sensitive information.

Mitigation Strategies

Immediately update the Archer C20 v6 firmware to the latest version provided by TP-Link to patch the OS command injection vulnerability. Ensure only trusted administrators have access to the web management interface and restrict WAN configuration privileges.

Hi! I’m here to help you understand CVE-2026-75616. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70