An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device, potentially exposing sensitive information.This issue affects AX53 v1.0: before 1.7.1 Build 20260213.
References
| Link | Resource |
|---|---|
| https://talosintelligence.com/vulnerability_reports/ | Third Party Advisory |
| https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware | Product |
| https://www.tp-link.com/my/support/download/archer-ax53/v1/#Firmware | Product |
| https://www.tp-link.com/us/support/faq/5055/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
14 Apr 2026, 16:19
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.7 |
| References | () https://talosintelligence.com/vulnerability_reports/ - Third Party Advisory | |
| References | () https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware - Product | |
| References | () https://www.tp-link.com/my/support/download/archer-ax53/v1/#Firmware - Product | |
| References | () https://www.tp-link.com/us/support/faq/5055/ - Vendor Advisory | |
| CWE | CWE-610 | |
| CPE | cpe:2.3:h:tp-link:archer_ax53:1.0:*:*:*:*:*:*:* cpe:2.3:o:tp-link:archer_ax53_firmware:*:*:*:*:*:*:*:* |
|
| First Time |
Tp-link archer Ax53 Firmware
Tp-link Tp-link archer Ax53 |
08 Apr 2026, 19:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-08 19:25
Updated : 2026-04-14 16:19
NVD link : CVE-2026-30817
Mitre link : CVE-2026-30817
CVE.ORG link : CVE-2026-30817
JSON object : View
Products Affected
tp-link
- archer_ax53
- archer_ax53_firmware