CVE-2026-109683
UPnP Newline Injection Vulnerability in TP-Link Archer BE805
A newline injection vulnerability exists in the UPnP service of Archer BE805 v1 such that an adjacent attacker can supply newline characters in a UPnP port-mapping description due to improper sanitization, resulting in possible injection of unintended content into UPnP port-mapping data. Successful exploitation may allow an unauthenticated attacker on the local network to modify runtime UPnP port-mapping information and create spoofed entries within the affected service. The issue is limited to the integrity of UPnP mapping data and does not demonstrate code execution or privilege escalation.
| CWE | CWE-93 |
| Vendor | tp-link systems inc. |
| Product | archer be805 v1 |
| Published | Nov 6, 2026 |
Get instant alerts for tp-link systems inc. archer be805 v1
Be the first to know when new unknown vulnerabilities affecting tp-link systems inc. archer be805 v1 are published — delivered to Slack, Telegram or Discord.