Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 23, 2026 · NIST NVD

   Detected

   Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.

2. Jun 17, 2026 · NIST NVD

   Updated

   Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.

Affected

• cpe tp-link/archer nx200 firmwareversion unspecified
• cpe tp-link/archer nx210 firmwareversion unspecified
• cpe tp-link/archer nx500 firmwareversion unspecified
• cpe tp-link/archer nx600 firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2025-15518

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2025-15518

  Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary comm

  nvd.nist.gov

References

• Product · tp-link.com
• Product · tp-link.com
• Product · tp-link.com
• Product · tp-link.com
• Vendor Advisory · tp-link.com