High severity · published Jul 14, 2026
CVE-2026-15429
Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800v
8.8
CVSS
1.4%
EPSS
No
On KEV
Description
A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data.
An
authenticated user with sufficient privileges may be able to modify account
settings and gain elevated administrative privileges.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AV
Archer VX1800v v1 · TP-Link Systems Inc.
before 0.16.0 2.0.0 v6092.0 Build 260521 RC.7927n · source: vendor
AV
Archer Vx1800v Firmware · Tp-link
before 0.16.0; 2.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-15429
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-15429
Product
https://www.tp-link.com/en/support/download/archer-vx1800v/#Firmware
Vendor Advisory
https://www.tp-link.com/us/support/faq/5189/
More from Archer VX1800v v1
8.8
CVE-2026-15428
OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v
8.1
CVE-2026-15427
OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v