CVE-2025-40634

CVE-2025-40634 TP-Link Archer AX50 路由器在其固件版本 1.0.14 Build 20240108 rel.426554555 中存在栈缓冲区溢出漏洞，可在 LAN 和 WAN 侧实现远程代码执行。此漏洞与 Flashback 团队发现并在其系列视频中详细描述（见参考资料）的 CVE-2020-10881 具有相同的根本原因。不过，利用过程略有不同，因此需要编写新的漏洞利用代码。 根本原因 此漏洞出现在 conn-indicator 二进制程序中，该程序负责通过定期发送 DNS 查询并监听其在 32000 到 61000 之间随机 UDP...

CVE-2024-53375

CVE-2024-53375 Inyección de comandos del sistema operativo autenticada en routers de la serie TP-Link Archer Dispositivos afectados Los dispositivos TP-Link que utilizan la funcionalidad HomeShield son vulnerables a este exploit. Esto incluye múltiples routers de la serie TP-Link Archer. Probado...

CVE-2026-22226

CVE-2026-22226 Prueba de concepto para CVE-2026-22226 Inyección de comandos del sistema operativo autenticada en el lado LAN en el cliente VPN de los routers Wi-Fi TP-Link Archer Resumen de la vulnerabilidad El controlador del cliente VPN almacena la descripción de la entrada controlada por el...

CVE-2021-44827

CVE-2021-44827 CVE-2021-44827的PoC - Tp-link Archer C20i中的认证远程代码执行 文章：https://full-disclosure.eu/reports/2022/CVE-2021-44827-tplink-authenticated-remote-code-execution.html 示例 root@kitploit: $ python exploit.py error0 error0 Run postexploitcmd Trying 192.168.0.1... Connected to 192.168.0.1 Escape...

CVE-2023-1389

Description CVE-2023–1389 is an Unauthenticated Command Injection vulnerability in the TP-Link Archer AX21 WiFi router. A calllback in the country parameter uses the popen function, which is run as root, allowing the attacker to inject arbitrary values through GET or POST requests to the admin...

TP-Link Archer A20 v3 Router - Cross-site Scripting

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

CVE-2026-16348

TP-Link Archer BE800 V1 — RCE autenticado mediante inyección de clave VPN CVE: CVE-2026-16348 CVSS: 8.5 Alta — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L Autenticación requerida: Credenciales de administrador válidas Posición en la red: Red remota si la interfaz de gestión es...

CVE-2023-1389

TP-Link Archer AX21 - Inyección de Comandos No Autenticada Loader POC CVE-2023-1389 Título del Exploit: TP-Link Archer AX21 - Inyección de Comandos No Autenticada Fecha de Descubrimiento : 25/07/2023 Autor del Exploit: Voyag3r root@kitploit: How to Use :- Scanning - Use Zmap : zmap -p 80 -o...

CVE-2020-10882

参考链接 https://www.zerodayinitiative.com/blog/2020/4/6/exploiting-the-tp-link-archer-c7-at-pwn2own-tokyo https://github.com/rdomanski/ExploitsandAdvisories/blob/master/advisories/Pwn2Own/Tokyo2019/laobomb.md...

CVE-2021-27246_Pwn2Own2020

Pwn2Own 2020 东京站 - TPlink 漏洞利用 这里是用于在 Pwn2Own 2020 东京站期间利用 TPlink Archer 路由器的文件。 该漏洞编号为 CVE-2021-27246。 你可以在 synacktiv 网站上查看博客文章以获取详细信息。 https://www.synacktiv.com/publications/pwn2own-tokyo-2020-defeating-the-tp-link-ac1750.html...

TP-Link-ArcherC5-RCE

TP-Link Archer C5 RCE Autenticado a Través de Carga de Archivo de Configuración Malicioso CVE-2018-19537 Descripción Existe una vulnerabilidad de ejecución remota de código RCE autenticada en todas las versiones de firmware publicadas para el router TP-Link Archer C5. Al cargar un archivo de...

tplink-CVE-2017-11519

tplink-CVE-2017-11519 POC para TP-Link Archer C9 - Restablecimiento de contraseña de administrador y RCE CVE-2017-11519 Consulta el writeup en https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html...

CVE-2026-75616

CVE-2026-75616 Inyección autenticada de comandos del sistema operativo en la interfaz de administración web del TP-Link Archer C20 v6. Los valores de configuración BPA WAN se pasan a system sin una neutralización adecuada, lo que permite a un administrador autenticado en la red adyacente ejecutar...

cve-2026-8697

CVE-2026-8697: Omisión del Límite de Tasa de Inicio de Sesión en TP-Link Archer C64 CVE-2026-8697 es un fallo lógico en el sistema operativo del TP-Link Archer C64 llamado TPOS en el mensaje de depuración. Permite a cualquier usuario no privilegiado conectado al router omitir el límite de tasa de...

TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30075 该工具利用TP-Link Archer AX50及某些其他TP-Link路由器型号中存在的CVE-2022-30075 安全漏洞，执行经过身份验证的远程代码执行操作。 TP-Link Router Authenticated RCE Exploit CVE-2022-30075 该工具利用TP-Link Archer AX50及某些其他TP-Link路由器型号中存在的CVE-2022-30075...

EUVD-2026-70818

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...

EUVD-2026-70819

A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to...

CVE-2026-18330

A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to...

CVE-2026-18167

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...

CVE-2026-18167 Stack-based buffer overflow in TP-Link Archer AX55 v4

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...