Skip to content
ThreatCluster

High-Severity Vulnerability Discovered in TP-Link Routers

First seen 2 Jun 2026, 11:56 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 3, 2026 at 11:56 UTC
  • •CVE-2026-5509 allows remote command execution on affected TP-Link routers.
  • •The vulnerability affects Archer BE450 v1 and Archer BE7200 v1 models.
  • •Users are advised to secure their devices due to the high CVSS score of 8.5.

A high-severity vulnerability, CVE-2026-5509, has been disclosed in TP-Link's Archer BE450 v1 and Archer BE7200 v1 routers. This flaw allows attackers to execute arbitrary system commands if they gain admin access, posing a significant risk to both home and small-office networks. The vulnerability has a CVSS v4.0 score of 8.5, indicating a high level of danger. Users are urged to take immediate action to secure their devices against potential exploitation. The vulnerability was published on May 27, 2026, and affects a wide range of users relying on these router models. No patches or mitigations have been mentioned in the articles as of the publication date.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 112d ago How this analysis works

Timeline

2026-05-27
CVE-2026-5509 published
TP-Link disclosed a high-severity vulnerability affecting Archer BE450 and BE7200 routers, allowing remote command execution.
Cybersecuritynews
2026-05-27
CVE-2026-5509 published
The vulnerability was assigned a CVSS v4.0 score of 8.5, indicating a high risk.
Gbhackers
2026-06-02
Vulnerability disclosed to public
The security flaw was publicly disclosed, raising awareness among users and security professionals.
Cybersecuritynews
2026-06-02
Vulnerability reported in multiple outlets
Both Cybersecuritynews and Gbhackers reported on the vulnerability, emphasizing its severity.
Gbhackers

More articles in this cluster (2)

Following this threat?

Track TP-Link and CVE-2026-5509 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 2