---
id: CVE-2026-17176
title: >-
  An OS

  command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9
  Plus allows an

  adjacent network attacker to execute arbitrary commands with root privileges
  by

  sending a crafted UDP packet.




  Successful exploitation …
summary: >-
  An OS

  command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9
  Plus allows an

  adjacent network attacker to execute arbitrary commands with root privileges
  by

  sending a crafted UDP packet.




  Successful exploitation …
severity: high
cvss: 7.7
cvssVector: 'CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L'
cwe:
  - CWE-78
vendor: TP-Link Systems Inc.
product: Deco BE11000 V2
affected:
  - deco_be11000_v2 < 1.3.5 Build 26071712
  - deco_m9_plus_v2 < 1.9.2 Build 20260818
published: '2026-09-11'
updated: '2026-10-01'
sourceUpdated: '2026-10-01T18:17:17.377'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-17176'
references:
  - url: 'https://www.tp-link.com/en/support/download/deco-m9-plus/v2/'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
  - url: 'https://www.tp-link.com/en/support/faq/5293/'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
  - url: 'https://www.tp-link.com/us/support/download/deco-be11000/#Firmware'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
  - url: 'https://www.tp-link.com/us/support/download/deco-m9-plus/v2/#Firmware'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-11T14:32:22.502230Z'
cvssSource: cna
epss: 0.14992
epssPercentile: 0.967
ingestedAt: '2026-09-13T10:44:54.913Z'
---

## Overview

An OS
command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9 Plus allows an
adjacent network attacker to execute arbitrary commands with root privileges by
sending a crafted UDP packet.



Successful exploitation may lead to complete
device compromise, including unauthorized command execution, modification of
device settings, and loss of confidentiality, integrity, and availability

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.