sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2026-22220 Improper Input Validation Leading to DoS on TP-Link Archer BE230

Medium 6.8 Published Updated

A network-adjacent attacker with high privileges can cause the TP-Link Archer BE230 web interface to become unresponsive via improper input validation.

Exploited in the wild
Not known
Login needed
An administrator
Attackable
Local or same network only
Victim action needed
Not needed
Fix
None listed

What is CVE-2026-22220?

CVE-2026-22220 is a medium-severity denial of service vulnerability in TP-Link Systems Inc. Archer BE230 v1.2, published on 3 Feb 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A lack of proper input validation in the HTTP processing path in TP-Link Archer BE230 v1.2 (web modules) may allow a crafted request to cause the device’s web service to become unresponsive, resulting in a denial of service condition. A network adjacent attacker with high privileges could cause the device’s web interface to temporarily stop responding until it recovers or is rebooted. This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420.

Weakness: CWE-20

Which versions are affected by CVE-2026-22220?

It affects 1 product.

Products include Tp-Link Archer Be230 Firmware.

How do I fix CVE-2026-22220?

No fix has been published for CVE-2026-22220 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2026-22220 being exploited?

There is no known exploitation of CVE-2026-22220 in the wild and no public exploit code.

Sources

Also known as GHSA-gm7f-mr33-3p7w.

Is CVE-2026-22220 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free