TP-Link patched an unauthenticated OS command injection flaw (CVE-2026-9254) and other risks like CVE-2026-16348 and CVE-2026-78541 in Archer routers.

Related Posts:

• Public PoC for CVE-2026-52923 Allows Attackers to Escalate to Root Privilege
• CVE-2026-77136: TYPO3 Powermail RCE Flaw Exploited in the Wild
• Weidmueller Router Flaw CVE-2026-63586 With CVSS 9.8 Allows Attackers To Execute Arbitrary Commands With Root Privileges

The post CVE-2026-9254: Unauthenticated OS Command Injection Hits TP-Link Archer appeared first on Daily CyberSecurity.