A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a specially crafted configuration file. Successful exploitation may cause a crash and could allow arbitrary code execution, enabling modification of device state, exposure of sensitive data, or further compromise of device integrity.
This issue affects AX53 v1.0: before 1.7.1 Build 20260213.
References
| Link | Resource |
|---|---|
| https://talosintelligence.com/vulnerability_reports/ | Third Party Advisory |
| https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware | Product |
| https://www.tp-link.com/my/support/download/archer-ax53/v1/#Firmware | Product |
| https://www.tp-link.com/us/support/faq/5055/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
14 Apr 2026, 16:19
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://talosintelligence.com/vulnerability_reports/ - Third Party Advisory | |
| References | () https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware - Product | |
| References | () https://www.tp-link.com/my/support/download/archer-ax53/v1/#Firmware - Product | |
| References | () https://www.tp-link.com/us/support/faq/5055/ - Vendor Advisory | |
| First Time |
Tp-link archer Ax53 Firmware
Tp-link Tp-link archer Ax53 |
|
| CWE | CWE-787 | |
| CPE | cpe:2.3:h:tp-link:archer_ax53:1.0:*:*:*:*:*:*:* cpe:2.3:o:tp-link:archer_ax53_firmware:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.0 |
08 Apr 2026, 19:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-08 19:25
Updated : 2026-04-14 16:19
NVD link : CVE-2026-30814
Mitre link : CVE-2026-30814
CVE.ORG link : CVE-2026-30814
JSON object : View
Products Affected
tp-link
- archer_ax53
- archer_ax53_firmware