# CVE-2026-22222: An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2 (web modules) allows adjacent…

Source: https://junglewise.ai/threats/cve-2026-22222-an-os-command-injection-vulnerability-in-tp-link-archer-be230-v1  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-02-02  
License: CC BY 4.0 with a link back

CVE-2026-22222 · Severity: high · CVSS 8 · Published 2026-02-02

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2 (web modules) allows adjacent 

authenticated 

attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.

This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.

Technologies: [TP-Link Archer Be230](https://junglewise.ai/threats/technologies/archer-be230), [TP-Link Archer Be230 Firmware](https://junglewise.ai/threats/technologies/archer-be230-firmware). Vendors: [TP-Link](https://junglewise.ai/threats/vendors/tp-link).

## Quick answers

**Is CVE-2026-22222 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-22222 being exploited in the wild.

**How severe is CVE-2026-22222?** High severity, with a CVSS score of 8, published 2 February 2026.

**Which products and versions are affected?** TP-Link Archer Be230, TP-Link Archer Be230 Firmware. The advisory does not name versions.

**Is there a fix for CVE-2026-22222?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-22222?** Check whether you run TP-Link Archer Be230 or TP-Link Archer Be230 Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- TP-Link Archer Be230
- TP-Link Archer Be230 Firmware

## Related threats

- [TP-Link Archer command injection in VPN server configuration](https://junglewise.ai/threats/cve-2026-22226-tp-link-archer-command-injection-in-vpn-server-configuration)
- [TP-Link Archer BE230 and BE3600 OS command injection in VPN module](https://junglewise.ai/threats/cve-2026-22223-tp-link-archer-be230-and-be3600-os-command-injection-in-vpn)
- [TP-Link Archer BE230 and BE3600 OS command injection](https://junglewise.ai/threats/cve-2026-22221-tp-link-archer-be230-and-be3600-os-command-injection)
- [TP-Link Archer Routers OS command injection in VPN modules](https://junglewise.ai/threats/cve-2026-0631-tp-link-archer-routers-os-command-injection-in-vpn-modules)