CVE-2026-15429: TP-Link Archer VX1800v privilege escalation in HTTP authentication

CVE-2026-15429 · Severity: info · CVSS 5.1 · Published 2026-07-14

A security vulnerability exists in the TP-Link Archer VX1800v router, a device used for high-speed internet connectivity. An attacker who already has basic user access to the router's management interface can exploit this flaw to elevate their permissions to a full administrator. This could allow them to change critical account settings and take control of the device's configuration.

Technologies: TP-Link Archer VX1800v. Vendors: TP-Link.

Quick answers

Is CVE-2026-15429 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-15429 being exploited in the wild.
How severe is CVE-2026-15429?
Informational severity, with a CVSS score of 5.1, published 14 July 2026.
Which products and versions are affected?
TP-Link Archer VX1800v < 0.16.0 2.0.0 v6092.0 Build 260521 RC.7927n.
Is there a fix for CVE-2026-15429?
A patch was published on 2026-05-21: Firmware build date for the fix. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-15429 attacked?
It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-15429?
Check whether you run TP-Link Archer VX1800v at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A privilege escalation vulnerability (CWE-93) exists in the HTTP authentication component of the TP-Link Archer VX1800v v1. The root cause is improper neutralization of CRLF sequences (newline characters) in user-controlled input, which are then used to construct internal configuration data. An attacker with low-privileged authenticated access to the device's management interface via an adjacent network can exploit this to modify account settings. Successful exploitation allows the attacker to elevate their privileges to an administrative level. TP-Link has released firmware version 0.16.0 2.0.0 v6092.0 Build 260521 RC.7927n or later to address this issue.

Affected products

  • TP-Link Archer VX1800v v1 < 0.16.0 2.0.0 v6092.0 Build 260521 RC.7927n

Timeline

  • 2026-07-14: advisory: TP-Link and NVD published the advisory.
  • 2026-05-21: patched: Firmware build date for the fix.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.