Command Injection Flaw in TP-Link Archer AXE75 OpenVPN Module

🕵️ RESEARCH & DEEP DIVES

• Command Injection Flaw in TP-Link Archer AXE75 OpenVPN Module CVE-2026-9044
  TP-Link Archer AXE75 V1 routers have an OS command injection vulnerability in their OpenVPN module.
  • Applies to TP-Link Archer AXE75 V1 routers with OpenVPN VPN module
  • Vulnerability allows adjacent, authenticated attackers to execute arbitrary OS commands
  • Exploited by importing a specially crafted VPN client configuration file
  • Improper filtering of special characters leads to command injection
  • Affected versions are all before firmware 1.5.6 Build 20260623
    📎 Coverage: cve.threatint.com · 📄 Original: cve.threatint.com · 👁 via CVE ThreatInt

🔓 CVEs & KEV

• CVE-2026-34641 — CVSS 7.8 — Premiere Pro | Out-of-bounds Write (CWE-787)Premiere Pro is affected by an ou...
• CVE-2026-45377 — CVSS 6.5 — Decidim: Private exports can be downloaded through reusable linksDecidim is a...
• CVE-2026-54785 — CVSS 6.2 — gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with...
• CVE-2026-45376 — CVSS 5.5 — Decidim: Admin user search allows SQL injection through similarity-based sort...
• CVE-2026-54909 — CVSS 5.3 — Pion STUN vulnerable to remote denial of service via panic while parsing a ma...
• CVE-2026-45330 — CVSS 4.9 — Decidim: Verification admins can access supplied IDs from other organisationsD...
• CVE-2026-54787 — CVSS 3.1 — sigstore-go fails to check signature timestamps against a signing key's valid...
• CVE-2026-54768 — CVSS — — WPGraphQL has deprecated user field on SendPasswordResetEmailPayload that l...
• CVE-2026-53573 — CVSS — — core-geonetwork has an Open Redirect BypassGeoNetwork is a catalog applicatio...