CVE-2026-9044— Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75
Possible ATT&CK Techniques 3AI
T1068 · Exploitation for Privilege Escalation T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-9044
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75
Source: CVE Program / CVE List V5
Vulnerability Description
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper filtering of special characters. Successful exploitation of this vulnerability may enable an attacker to gain full control of the affected device, potentially compromising configuration integrity, network security, and service availability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TP-Link Systems Inc. | AXE75 V1 | 0 ~ 1.5.6 Build 20260623 | - |
II. Public POCs for CVE-2026-9044
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-9044
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-9044 (1)
IV. Related Vulnerabilities
Same vendor: TP-Link Systems Inc.
- CVE-2026-12935
Unauthenticated Remote Code Execution in TP-Link TL-WR940N R - CVE-2026-12001
Hardcoded Credential Vulnerability in Multiple TP-Link Route - CVE-2026-13230
Information Disclosure Vulnerability in Local Discovery Resp - CVE-2026-9770
Hardcoded Cryptographic Key Information Disclosure Vulnerabi - CVE-2026-5040
Weak Password Hashing Mechanism in TP-Link Deco M5
Same weakness: CWE-78
- CVE-2026-17566
pgAdmin 4: RCE via backslash-escape mismatch in Import/Expor - CVE-2026-17347
pgAdmin 4: OS command injection in MASTER_PASSWORD_HOOK via - CVE-2026-12943
This Power Hardware Management Console update is being relea - CVE-2026-12940
Langflow is affected by remote code execution due to multipl - CVE-2026-14522
IBM App Connect Enterprise is vulnerable to an arbitrary fil
V. Comments for CVE-2026-9044
No comments yet