CVE-2026-9031

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Successful exploitation may cause httpd process or device to crash, resulting in loss of access to the web interface and a denial-of-service condition.

CVSS

No CVSS.

References

Link	Resource
https://www.tp-link.com/en/support/download/archer-a6/v4/#Firmware
https://www.tp-link.com/en/support/faq/5234/
https://www.tp-link.com/us/support/download/archer-a6/v4/#Firmware

Configurations

No configuration.

History

23 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad de validación de entrada en el gestor HTTP-WRITEOEM debido a una validación insuficiente de los datos proporcionados por el usuario antes de que sean procesados por la lógica interna de gestión de escritura de flash. La explotación exitosa puede causar que el proceso httpd o el dispositivo se bloquee, lo que resulta en la pérdida de acceso a la interfaz web y una condición de denegación de servicio.

Information

Published : 2026-08-07 21:17

Updated : 2026-10-24 13:10

NVD link : CVE-2026-9031

Mitre link : CVE-2026-9031

CVE.ORG link : CVE-2026-9031

JSON object : View

Products Affected

No product.

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2026-9031", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-9031", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-10T17:23:21.410852Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.8, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "affectedData": [{"vendor": "TP-Link Systems Inc.", "modules": ["httpd"], "product": "Archer A6 v4", "versions": [{"status": "affected", "version": "0", "lessThan": "V4_1.15.10 Build 260625 Rel.25447", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-07T21:17:30.530", "references": [{"url": "https://www.tp-link.com/en/support/download/archer-a6/v4/#Firmware", "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}, {"url": "https://www.tp-link.com/en/support/faq/5234/", "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}, {"url": "https://www.tp-link.com/us/support/download/archer-a6/v4/#Firmware", "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An input validation\nvulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation\nof user-supplied data before it is processed by internal flash-write handling\nlogic.\n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may cause httpd process or device to crash, resulting in loss of access\nto the web interface and a denial-of-service condition."}, {"lang": "es", "value": "Existe una vulnerabilidad de validaci\u00f3n de entrada en el gestor HTTP-WRITEOEM debido a una validaci\u00f3n insuficiente de los datos proporcionados por el usuario antes de que sean procesados por la l\u00f3gica interna de gesti\u00f3n de escritura de flash.\n\nLa explotaci\u00f3n exitosa puede causar que el proceso httpd o el dispositivo se bloquee, lo que resulta en la p\u00e9rdida de acceso a la interfaz web y una condici\u00f3n de denegaci\u00f3n de servicio."}], "lastModified": "2026-10-24T13:10:00.147", "sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630"}