Security Vulnerabilities - CVEs Published In February 2026
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(web modules) and Archer AXE75 v1.0 allows adjacent
authenticated
attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.
This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420 and Archer AXE v1.0 <
1.5.3 Build 20260209 rel. 71108.
CVSS Score
8.5
EPSS Score
0.013
Published
2026-02-02
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) allows an adjacent
authenticated
attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.
This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420.
CVSS Score
8.5
EPSS Score
0.013
Published
2026-02-02
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVSS Score
7.1
EPSS Score
0.001
Published
2026-02-02
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-02-02
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-02-02
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-02-02
Transient DOS when processing a received frame with an excessively large authentication information element.
CVSS Score
6.5
EPSS Score
0.002
Published
2026-02-02
IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.
CVSS Score
4.3
EPSS Score
0.002
Published
2026-02-02
Memory Corruption when user space address is modified and passed to mem_free API, causing kernel memory to be freed inadvertently.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-02-02
Memory Corruption when multiple threads simultaneously access a memory free API.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-02-02