CVE-2026-9031CWE-20

CVE-2026-9031

published August 8, 2026

CVSS
6.8
EPSS
0%
Percentile
16.2
In the wild
Unconfirmed
What it is

An input validation

vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation

of user-supplied data before it is processed by internal flash-write handling

logic.

Successful

exploitation may cause httpd process or device to crash, resulting in loss of access

to the web interface and a denial-of-service condition.

The record
Technical detail
CVSS
6.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00256 · 16.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-08-08T01:17Z
References (3)
EPSS history
Timeline
  • 07 AUG 20:40Z
    Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6
    cvelistv5