https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 04:26:52 +0000 https://db.gcve.eu/vuln/cve-2026-118865 <p><strong>Affected:</strong> TP-Link Systems Inc. Archer AX3000 v2</p> <p>An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly neutralized before being passed to a system command.</p> <p>Successful exploitation may allow arbitrary command execution on the affected device.</p> <p><strong>Affected:</strong> TP-Link Systems Inc. Archer AX3000 v2</p> <p>An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly neutralized before being passed to a system command.</p> <p>Successful exploitation may allow arbitrary command execution on the affected device.</p> https://db.gcve.eu/vuln/cve-2026-118865