CVE-2026-109683 Details
Description
A newline injection vulnerability exists in the UPnP service of Archer BE805 v1 such that an adjacent attacker can supply newline characters in a UPnP port-mapping description due to improper sanitization, resulting in possible injection of unintended content into UPnP port-mapping data. Successful exploitation may allow an unauthenticated attacker on the local network to modify runtime UPnP port-mapping information and create spoofed entries within the affected service. The issue is limited to the integrity of UPnP mapping data and does not demonstrate code execution or privilege escalation.
A newline injection vulnerability has been identified in the UPnP service of the TP-Link Archer BE805 router, specifically in version 1.0. This vulnerability allows an adjacent attacker to inject newline characters into a UPnP port-mapping description due to inadequate input sanitization. As a result, unintended content could be added to the UPnP port-mapping data. Exploitation of this vulnerability could enable an unauthenticated attacker on the local network to alter the UPnP port-mapping information in real-time and create fake entries in the affected service. However, this issue only impacts the integrity of the UPnP mapping data and does not allow for code execution or privilege escalation.
Users are advised to update their devices to the latest firmware version that addresses this vulnerability. The fixed firmware versions are Archer BE805 V1.20_1.5.1 Build 261102 and Archer BE805 V1.6_1.5.1 Build 261102.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.tp-link.com/en/support/download/archer-be805/v1.20/#Firmware | TPLink | ProductVendor |
| https://www.tp-link.com/us/support/download/archer-be805/#Firmware | TPLink | ProductVendor |
| https://www.tp-link.com/us/support/faq/5389/ | TPLink | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-93 | Improper Neutralization of CRLF Sequences ('CRLF Injection') | TPLink |
Affected Products
| Product | Versions |
|---|---|
| TP-Link Archer BE805 | >= 1.0, < 1.20_1.5.1 Build 261102 >= 1.6, < 1.6_1.5.1 Build 261102 |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 6, 2026 | New CVE Received | TPLink |