CVE-2025-62673

The CVE-2025-62673 issue affects TP-Link Archer AX53 v1.0 through 1.3.1 Build 20241120, with a heap-based buffer overflow in the tdpserver modules that can be triggered by a crafted network packet from a nearby attacker, potentially causing a segmentation fault or arbitrary code execution. The Re...

CVE-2026-0834

CVE-2026-0834 affects TP-Link Archer C20 v6.0 (firmware before V6_251031) and Archer AX53 v1.0 (firmware before V1_251215) via the TDDP module. A logic vulnerability allows unauthenticated adjacent attackers to remotely execute administrative commands, including factory reset and device reboot, w...

CVE-2025-61983

TP-Link Archer AX53 (v1.0 through 1.3.1 Build 20241120) has a heap-based buffer overflow in the tmpserver modules. An authenticated adjacent attacker can trigger a segmentation fault or potentially execute arbitrary code by sending a crafted network packet containing an excessive number of fields...

CVE-2025-58077

CVE-2025-58077 is a heap-based buffer overflow in the TP-Link Archer AX53 (tmpserver modules). An authenticated adjacent attacker can trigger a segmentation fault or potentially execute arbitrary code by sending a specially crafted set of network packets containing an excessive number of host ent...

CVE-2026-30818

CVE-2026-30818 affects TP-Link Archer AX53 v1.0 (AX53) with dnsmasq. An OS command injection occurs when processing a specially crafted configuration file, due to insufficient input validation. An authenticated adjacent attacker can execute arbitrary code, potentially modify device configuration,...

CVE-2025-15608

CVE-2025-15608 affects TP-Link AX53 v1. The vulnerability arises from insufficient input sanitization in the device’s probe handling logic, allowing unvalidated parameters to trigger a stack-based buffer overflow in the affected service. Under specific conditions this may enable remote code execu...

CVE-2025-59482

CVE-2025-59482 affects TP-Link Archer AX53 (v1.0 through 1.3.1 Build 20241120). A heap-based buffer overflow exists in the device’s tmpserver modules that can be triggered by a specially crafted network packet containing a field whose length exceeds the maximum expected value. The vulnerability c...

CVE-2025-59487

TP-Link Archer AX53, v1.0–1.3.1 Build 20241120, contains a heap-based buffer overflow in the tmpserver modules. The root cause is improper validation of a packet field offset used to select the memory write location, allowing authenticated adjacent attackers to trigger segmentation faults or pote...

CVE-2026-30815

CVE-2026-30815 describes an OS command injection in the OpenVPN module of the TP-Link Archer AX53 (v1.0). The issue arises from insufficient input validation, allowing an authenticated adjacent attacker to run system commands when a specially crafted configuration file is processed, potentially m...

CVE-2025-61944

TP-Link Archer AX53 v1.0 through 1.3.1 Build 20241120 is affected by a heap-based buffer overflow in the tmpserver modules. An authenticated adjacent attacker can trigger a segmentation fault or potentially execute arbitrary code by sending a crafted network packet containing an excessive number ...

CVE-2025-58455

TP-Link Archer AX53, affected in tmpserver modules, has a heap-based buffer overflow that can be triggered by an authenticated adjacent attacker sending a crafted network packet exceeding the maximum expected length. Affected versions are 1.0 through 1.3.1 Build 20241120. This can cause a segment...

CVE-2026-30814

Affects TP-Link Archer AX53 v1.0. The vulnerability is a stack-based buffer overflow in the tmpServer module, allowing an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a crafted configuration file. Exploitation may crash the device and ...

CVE-2025-62501

TP-Link Archer AX53 (v1.0) is affected by an SSH hostkey misconfiguration in the tmpserver modules up to version 1.3.1 Build 20241120, enabling a MITM to capture credentials and potentially grant unauthorized access if those credentials are reused. Public details across NVD/Red Hat/CVE records co...

CVE-2026-30816

The CVE-2026-30816 entry details an external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0. An authenticated adjacent attacker can read arbitrary files when a malicious configuration file is processed, potentially leading to unauthorized access to sensitive dat...

CVE-2025-15607

The CVE-2025-15607 issue affects TP-Link Archer AX53 v1 in the mscd (debug) component. The root cause is insufficient input handling in the mscd debug functionality, enabling command injection where log redirection to arbitrary files and concatenation of unvalidated file content into shell comman...

CVE-2025-62404

TP-Link Archer AX53 v1.0–1.3.1 Build 20241120 contains a heap-based buffer overflow in the tmpserver modules. An authenticated, adjacent attacker can trigger a segmentation fault or potentially execute arbitrary code by sending a crafted network packet whose length exceeds the maximum expected va...

CVE-2026-30817

CVE-2026-30817 describes an external configuration control vulnerability in the OpenVPN module of TP-Link AX53 (v1.0) that could allow an authenticated adjacent attacker to read arbitrary files when processing a malicious configuration file. The effect is potential unauthorized access to sensitiv...

CVE-2025-62405

TP-Link Archer AX53 v1.0–1.3.1 Build 20241120 contains a heap‑based buffer overflow in the tmpserver modules. An authenticated adjacent attacker can trigger a segmentation fault or potentially execute arbitrary code by sending a specially crafted network packet with a field longer than expected. ...