CVE-2026-9030
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
44/100
Published: 2026-08-07
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
Adjacent
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Adjacent
AC:
Low
PR:
High
UI:
None
S:
X
AT:
None
VC:
None
VI:
None
VA:
High
Description
A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instruction handlng path in httpd does not properly synchronize or safely manage concurrent systool operations. By sending crafted systool instructions through the asynchronous request path, successful exploitation may cause the httpd process or device management service to crash and may result in temporary loss of access to the web management interface or device reboot.