Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.5

Archer AXE75 Router Vulnerable to Remote Code Execution from Neighboring Network

CVE-2025-15568
Summary

The Archer AXE75 router has a security issue that allows an attacker on the same network to gain full control of the device. This can happen when an attacker is connected to your local network and knows the right credentials to access the router's settings. To protect your router, make sure to update to the latest firmware version available.

Original title
A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router. An authenticated attacker with adjacent-network access may be able to perform remote code execu...
Original description
A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router. An authenticated attacker with adjacent-network access may be able to perform remote code execution (RCE) when the router is configured with sysmode=ap. Successful exploitation results in root-level privileges and impacts confidentiality, integrity and availability of the device.

This issue affects Archer AXE75 v1.6/v1.0: through 1.3.2 Build 20250107.
nvd CVSS4.0 8.5
Vulnerability type
CWE-78 OS Command Injection
Published: 9 Mar 2026 · Updated: 14 Mar 2026 · First seen: 9 Mar 2026