{"id":"CVE-2026-109683","published":"2026-11-06T20:17:09.863","lastModified":"2026-11-06T21:15:29.947","description":"A newline\ninjection vulnerability exists in the UPnP service of Archer BE805 v1 such that\nan adjacent attacker can supply newline characters in a UPnP port-mapping\ndescription due to improper sanitization, resulting in possible injection of unintended\ncontent into UPnP port-mapping data.\n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may allow an unauthenticated attacker on the local network to\nmodify runtime UPnP port-mapping information and create spoofed entries within\nthe affected service. The issue is limited to the integrity of UPnP mapping\ndata and does not demonstrate code execution or privilege escalation.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-93"],"vendors":[],"products":[],"references":[{"url":"https://www.tp-link.com/en/support/download/archer-be805/v1.20/#Firmware","tags":[]},{"url":"https://www.tp-link.com/us/support/download/archer-be805/#Firmware","tags":[]},{"url":"https://www.tp-link.com/us/support/faq/5389/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}