Dashboard / CVE-2026-109683

CVE-2026-109683

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 56/100
Published: 2026-11-06 Modified: 2026-11-12 First seen: 2026-11-06 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
AT: None
VC: None
VI: Low
VA: None

Description

A newline injection vulnerability exists in the UPnP service of Archer BE805 v1 such that an adjacent attacker can supply newline characters in a UPnP port-mapping description due to improper sanitization, resulting in possible injection of unintended content into UPnP port-mapping data. Successful exploitation may allow an unauthenticated attacker on the local network to modify runtime UPnP port-mapping information and create spoofed entries within the affected service. The issue is limited to the integrity of UPnP mapping data and does not demonstrate code execution or privilege escalation.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
TP-Link Systems Inc. Archer BE805 v1 0 < V1.6_1.5.1 Build 261102
TP-Link Systems Inc. Archer BE805 v1 0 < V1.20_1.5.1 Build 261102
TP-Link Systems Inc. Archer BE805 v1 0 < V1.6_1.5.1 Build 261102
TP-Link Systems Inc. Archer BE805 v1 0 < V1.20_1.5.1 Build 261102

References & Advisories (3)

Bug Bounty Relevance

56 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.3 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.31%
Raw Score 0.003130
Percentile 24.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00313
2026-11-12
0.00313
2026-11-10
0.00313
2026-11-09
0.00313
2026-11-08
0.00313
2026-11-07
0.00313

Intelligence Sources

mitre ref →
nvd ref →

External Links