{"schemaVersion":3,"id":"CVE-2026-78541","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A stored OS\ncommand injection vulnerability exists in the parent-control module of TP-Link\nArcher BE3600 V1. An authenticated adjacent attacker with administrative access\nmay store a crafted profile name containing shell metacharacters, which is\nlater processed unsafely during daily cloud report generation and may result in\narbitrary command execution.\n\n\n\n\n\nSuccessful\nexploitation may allow command execution on the affected device with potential\nimpact to device confidentiality, integrity, and availability.","dates":{"published":"2026-08-24T18:26:11.670Z","modified":"2026-08-25T03:56:57.446Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.5,"severity":"high","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":8.5,"severity":"high","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":8.5,"severity":"high","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0228,"percentile":0.82975,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":1.318,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00962},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.0228,"percentile":0.82975}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00962,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0228,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.0228,"percentile":0.82975}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","description":"The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/78.html"}],"affected":[{"vendor":"tp-link systems inc.","product":"archer be3600 v1","name":"Archer BE3600 v1","label":"archer be3600 v1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.2.6 Build 20260617","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.6 Build 20260617","eol":null,"hubHref":"/vendor/tp-link_systems_inc/archer_be3600_v1"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.tp-link.com/us/support/download/archer-be3600/v1.26/#Firmware","label":"www.tp-link.com/us/support/download/archer-be3600/v1.26/","hostname":"www.tp-link.com","tags":["Patch"]},{"url":"https://www.tp-link.com/en/support/download/archer-be3600/v1/#Firmware","label":"www.tp-link.com/en/support/download/archer-be3600/v1/","hostname":"www.tp-link.com","tags":["Patch"]},{"url":"https://www.tp-link.com/us/support/faq/5264/","label":"www.tp-link.com/us/support/faq/5264/","hostname":"www.tp-link.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-08-24T18:26:11.670Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-25T03:56:57.446Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":34,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T10:27:34.074Z","stale":false,"partial":false}}