CVE-2026-11834: Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link Routers
A command injection vulnerability has been identified in the DHCP option processing logic in multiple TP-Link router models, due to insufficient validation of externally supplied DHCP option data. An adjacent attacker may exploit this vulnerability by supplying crafted DHCP responses, potentially resulting in unauthorized command execution during device initialization or provisioning workflows. This typically occurs when the device is in a factory-default or unconfigured state.
Successful exploitation may allow an adjacent, unauthenticated attacker to execute arbitrary commands with elevated privileges, potentially leading to full compromise of the affected device and unauthorized administrative control.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-11834?
CVE-2026-11834 has a high severity rating of 8.7 on the CVSS scale.
What vulnerability does CVE-2026-11834 describe?
CVE-2026-11834 describes an unauthenticated command injection vulnerability via DHCP option handling in multiple TP-Link routers.
How do I fix CVE-2026-11834?
To fix CVE-2026-11834, users should update their TP-Link routers with the latest firmware provided by the manufacturer.
Which routers are affected by CVE-2026-11834?
CVE-2026-11834 affects multiple TP-Link router models that process DHCP options.
What can an attacker do with CVE-2026-11834?
An attacker can exploit CVE-2026-11834 by supplying crafted DHCP responses to perform command injection on affected TP-Link routers.