CVE-2026-9044

An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper filtering of special characters.  Successful exploitation of this vulnerability may enable an attacker to gain full control of the affected device, potentially compromising configuration integrity, network security, and service availability.

• CWE-78

• https://www.tp-link.com/en/support/download/archer-axe75/v1/#FirmwareProduct
• https://www.tp-link.com/us/support/download/archer-axe75/v1/#FirmwareProduct
• https://www.tp-link.com/us/support/faq/5215/Vendor Advisory

Published

Jul 31, 2026

Last Modified

Oct 23, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90432In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90433In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90434In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90435In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-90438The Ninja Forms – The Contact Form Builder That Grows With Y…7.2
• CVE-2026-90439NGINX Plus and NGINX Open Source have a vulnerability in the…6.5
• CVE-2026-90440Uncaught exception, improper handling of exceptional conditi…8.2
• CVE-2026-90441A missing authorization vulnerability in the wgagent managem…8.1
• CVE-2026-90442A stack-based buffer overflow vulnerability in the Fireware …8.6
• CVE-2026-90443A web interface reflects a portion of the request URL into a…5.4
• CVE-2026-90444A file-transfer interface that requires valid credentials ac…8.8
• CVE-2026-90445An interface that accepts file uploads from authenticated us…6.5