CVE-2026-118865
Summary
by MITRE • 11/04/2026
An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly neutralized before being passed to a system command.
Successful exploitation may allow arbitrary command execution on the affected device.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 11/04/2026
Xxx Xxxxxxxxxxxxx Xxxxxxxxxx Xx Xxx Xxxxxx Xxxxxx Xx Xxxxxxxx Xxxxxxxxxx X Xxxxxxxx Xxxxxxxx Xxxx Xxxxxx Xxx Xxxxxxx Xxxxxxxx Xxxxxxxxx, Xxxxxxxxxxxx Xxxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx. Xxxx Xxxxx Xx Xxxxxxxxxx Xx Xx Xx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxxxx Xxxx Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx. Xxx Xxxx Xxxxx Xxxx Xx Xxx Xxxxxxxxxxxx Xxxxxxxxxxxx Xx Xxxx-xxxxxxxx Xxxxx Xxxx Xxxxxxxx Xxxxx Xxx Xxxxxxxx Xxx Xxxxxxx. Xxxx Xx Xxxxxxxxxxxxx Xxxxxxxx X Xxx Xxxxxxx Xxxxxx Xxx Xxxxxxxx Xx Xxxxxxxxx Xx Xxxxxxx Xx Xxxxxxx Xxx Xxx Xxxxxxxxx, Xxx Xxxxxx Xxxxxxx Xxxx Xxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxx Xxxxxxxxxxxxxx Xxxx Xx Xxxxxxxxxx, Xxxxx, Xx Xxxxxxxxxx. Xxxx Xxxx Xx Xxxxxx Xxxxxxxxxx Xxxxxx Xx Xxxxxxxxxxxxx Xxxxxxxx Xx Xxxxxx Xxxxxxxxx Xxxxxxxxx Xxxxxx Xxxxxxxx Xxxx Xxx Xxxxxxxxx Xxxxxxx Xx Xxx Xxxxxxxxxxx.
Xxxx X Xxxxxxxxx Xxxxxxxxxxx, Xxxx Xxxx Xxxxxx Xxxx Xxx-xx, Xxxxx Xxxxxxxxx Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx Xx Xx Xxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxx Xxxx X Xxxxxxx Xx Xxxxxxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xx Xxxxxx Xxxxxxxx Xxx Xxxx Xxxx Xx Xxxxxxxx Xxxxxxxxxxxx Xxxx Xxxxx Xxxxxxxx. Xx Xxxx Xxxxxxxx Xxxxxxx Xxx Xxxxxxx, Xxxxxxxxxxxxxx Xxxxxxxxx Xxxxx Xxxxxx Xxxxxxxxxx Xxxxxx Xxxxxxxx Xxxx Xxxx Xx Xx Xx Xxxxxxx Xxxx Xxxxxxxxxx. Xx Xxx Xxxx Xxxxxxxx Xx Xxx Xxxx Xx Xxx Xxxxxxxx Xxxxxxxxx Xxxxxxx X Xxxxxxxxx Xx Xxxxxxx Xxxxxxxxxx Xx Xx Xxxxxxx Xxxxxxxxxx Xxx Xxx Xxxxxxx, Xxx Xxxxxxx Xxxxxxxxxxx Xxxx Xxxxxxx Xxx Xxxxxxxx Xxxxxxx Xxxxxxxxx Xxx Xxxxxxxx Xxxxxxxxx. Xxxx Xxxx Xx Xxxx Xx Xxxxxxxxxxxx Xxxxxxxxx Xx Xxxxxxx Xxxxxxxxxxxxxx Xxxxxxx Xxxxxxx Xx Xxxxxxxx Xxxxxxxx Xxxxxx Xxxxxxxx Xxxx Xxxxx Xxxxxxxxx Xxxxxxxx Xxxxxx Xxxxx Xxxxxx Xx Xxx Xxxxxx'x Xxxxxxxxx Xxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xx Xxxxxx, Xx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxxx Xx Xxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxx Xxxx Xxx Xxxxxxxxxx Xx Xxx Xxxxxxxxxx Xxxxxxx Xx Xxxxxxxxxxx Xxxx. Xx Xxx Xxxxxxx Xx X Xxxx Xxxxxx Xxxx Xxx Xxxxxx Xxxxxx Xx, Xxxxx Xxxxxxxxx Xxxxx Xxx Xxxx Xxxx-xxxxx Xxxxxxxxxxx Xxx Xx Xxxxxxxxxx Xxxxxx Xxxxxxx Xx Xxxxxxxx Xxxxx Xxxxxxxxxxxx Xxxxx Xxxxxxxx Xxx Xxx Xxxxxxxxxxxx Xxxxxxxxx. Xxxxxxxxxxxx, Xx Xxxxxxxxxxxxx Xxxxxxxxxxxxx Xxx Xxx Xxxx Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxx Xx Xxxxxxx Xxxxxxxxx Xxx Xxxxxxxx Xxxx Xxxx Xx Xxxx Xxxx Xxxxxxx Xxxx Xxx Xxxxxx. Xxxx Xxxxx Xx Xxxxxx Xxxxxx Xxx Xxx Xxxxxxxxxxxx Xx Xxxxxxxxxx Xxxxxxx, Xxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxxxxxxxx, Xxxxxxxxxxxx Xx Xxxxxxx, Xxx Xxxxxxxxxxx Xxxxx Xxx Xxxxxx Xx X Xxxxx Xxxxx Xx Xxxxxx Xxxxx Xxxxxxx Xx Xxx Xxxxx Xxxxxxx.
Xxxx Xxxxxxxxxxxxx Xxxx Xxxxxxxx Xx Xxxxx Xxx&xx Xxxxxxxxx Xxxxx.xxx, Xxxxx Xxxxxx Xxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxxx: Xxxx Xxxxx Xxxxx. Xxx Xxxxxxxx Xxxxxxxx Xxxx Xxxxxxxxx Xx Xxxxxxxx Xxxxxxxx Xxxxx Xxxxxxx Xxxx Xxx Xxxxxxxxxxx Xx Xxxxx Xxxxxxxx Xxxxxx Xxxx Xxxxxxx Xxxx Xxxxx. Xxxxxxxxxxx, Xxxxxxx Xxxxxxxxxxxx Xxxxxxxx Xxxxxxxxxxxxxx, Xx Xxxx Xxxxxxx Xx Xxxxxxx Xxxxxx Xxxxxxx Xxxxx Xx Xxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxxx Xxxxx Xxxxxxxxxxx, Xxxxxxxxxxxx Xxx Xxxxxxxxxx Xx Xxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxx Xxxxxxxxxxx.
Xx Xxxxxxxx Xxxx Xxxx, Xxxxx Xxxxxx Xxxxxx Xxxxx Xxxxxx Xxxxxx Xx Xxxxxxxx Xx Xxxxxxx Xx Xxx Xxxxxx Xxxxxxx Xxxxxxxx Xx Xx-xxxx, Xxxxx Xxxxxx Xxxxxxxx Xxxxxxx Xxx Xxxxx Xxxxxxxxxx Xx Xxx Xxxxxxx Xxxxxxxx Xxxxxx. Xx Xxxxxxxxxxxx Xxxxx Xxxxxxxxx Xxxxxxxx Xx Xxx Xxxxxxxx, Xxxxxxxxxxx Xxxxxxxxxxxxxx Xxxxxx Xx Xxxxxxx Xx Xxxxxxxxx Xxx Xxxxxxxxx Xxxxx-xxxxxx Xxxxxxxxxxxxxx Xxx Xxxxxx Xxx Xxxxxxxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxx Xxxxx Xx Xxxxxxxxxxxx. Xxxxxxxxxxxx, Xxxxxxx Xxxxxxxxxxxx Xxxxxxxxxx Xxxxxx Xx Xxxxxxxx Xx Xxxxx Xxx Xxxxx Xxxxxx Xx X Xxxxxx Xx Xxxxxxxxxxx, Xxxxxxxx Xxxx Xxxx Xx Xxxxxxx Xxxxxxxxx Xxxxxx, Xxxxxxx Xxxxxxxx Xxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xxxxxxxxxx.