References https://www.ithome.com.tw/news/175177 https://bbs.kanxue.com/thread-281957.htm https://docs.ioin.in/writeup/sec2hack.com/_web_tplink_rce_html/index.html https://github.com/adysec/POC/blob/main/wpoc/%E8%B7%AF%E7%94%B1%E5%99%A8/TP-Link-ER7206%E5%AD%98%E5%9C%A8%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://www.hkcert.org/tc/security-bulletin/tp-link-router-remote-code-execution-vulnerability_20230426 https://www.iotsec-zone.com/article/490 https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/4aca879a-af18-44a0-b726-b679c7b6110d/ https://avd.aliyun.com/detail?id=AVD-2017-16960 https://www.tp-link.com/us/press/security-advisory/ https://www.eagletek.com.tw/post/http-tplink-dir-traversal-tp-link https://zhuanlan.zhihu.com/p/618549437 https://cert.tanet.edu.tw/prog/shownews.php?sel=1&id=32104 https://cloud.tencent.com/developer/article/2615422 https://www.anquanke.com/post/id/202671 https://www.h3c.com/cn/d_201801/1060102_30003_0.htm https://www.wepro180.com/%E5%85%AD%E5%A4%A7%E9%BB%91%E5%AE%A2%E9%9B%86%E5%9C%98%E7%9E%84%E6%BA%96tp-link%E8%B7%AF%E7%94%B1%E5%99%A8%E5%B7%B2%E7%9F%A5%E6%BC%8F%E6%B4%9E/ https://blog.csdn.net/weixin_30280259/article/details/161279832 https://www.tp-link.com/us/support/faq/5018/ https://app.opencve.io/cve/?vendor=tp-link https://www.cybersecuritydive.com/news/-botnet-exploits-tp-link-router/742319/ https://www.exploit-db.com/exploits/50058 https://www.secrss.com/articles/10850 https://zhuanlan.zhihu.com/p/671799717 https://www.tp-link.com/us/support/faq/5016/ https://www.sentinelone.com/vulnerability-database/cve-2026-3227/
Related VulnerabilitiesPoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX RouterPoCCVE-2026-19900: LB-LINK Routers - Unauthenticated Command Injection9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-63732)PoCCVE-2026-46339: 9Router <= 0.4.36 - Unauthenticated RCEPoCCVE-2026-59801: 9Router - Unauthenticated LLM Provider API ExposurePoC9router-default-login: 9Router - Default Login9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-46339)9router /api/tunnel/tailscale-install 命令执行漏洞PoCCVE-2026-54236: vLLM <= 0.23.0 - Anthropic Router Heap Address Information LeakPoCBLINK Routers /goform/set_cmd 命令执行漏洞(CVE-2025-1609)BLINK routers /goform/set_hidessid_cfg 命令执行漏洞(CVE-2025-45985)Cisco Any Router and Switch 默认口令漏洞