TP-Link patched an unauthenticated OS command injection flaw (CVE-2026-9254) and other risks like CVE-2026-16348 and CVE-2026-78541 in Archer routers. Related Posts: Public PoC for CVE-2026-52923 Allows Attackers to Escalate to Root Privilege CVE-2026-77136: TYPO3 Powermail RCE Flaw Exploited in the Wild Weidmueller Router Flaw CVE-2026-63586 With CVSS 9.8 Allows Attackers To Execute Arbitrary Commands With Root Privileges The post CVE-2026-9254: Unauthenticated OS Command Injection Hits TP-L