THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-0631 (HIGH 8.0) — An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and OpenVPN of AXE75 v1 allows an adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resu

[NVD] CVE-2026-0631 (HIGH 8.0) — An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and OpenVPN of AXE75 v1 allows an adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resu

lownvdPublished 2026-02-02

CVE-2026-0631 CVSS: 8.0 HIGH Published: 2026-02-02T18:16:13.620

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and OpenVPN of AXE75 v1 allows an adjacent

authenticated

attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity,

Indicators of compromise

CVE-2026-0631cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-0631