VulnSocial

CVE-2026-18330Patch

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to compromise session confidentiality. Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-321

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-09-04); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-09-04: 1Mentions · 2026-09-05: 1Mentions · 2026-09-06: 1Patch / Workaround · 2026-09-04: 1Patch / Workaround · 2026-09-05: 1Technical Details · 2026-09-04: 1Technical Details · 2026-09-05: 1Technical Details · 2026-09-06: 109-0409-0509-06
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-041
Patch1
2026-09-051
Patch1
2026-09-061
Disclosure1
Full discourse3 posts
  • elhacker.NET@elhackernet
    Disclosure

    Vulnerabilidades en TP-Link Archer permiten ejecución remota de código TP-Link ha revelado dos vulnerabilidades de seguridad ( CVE-2026-18167 y CVE-2026-18330 ) en su router Archer AX55 v4 https://blog.elhacker.net/2026/09/vulnerabilidades-en-tp-link-archer.html

    Post summary

    The post reports that TP‑Link has disclosed two CVEs (CVE‑2026‑18167 and CVE‑2026‑18330) for its Archer AX55 v4 router, noting they enable remote code execution but provides no PoC, exploit code, or patch details.

    021267146.9K
    142.5K followersView on X
  • Rıdvan Yağlı@ridvanyagli
    Patch

    🚨 TP-Link Archer AX55 V4 routerlarda RCE riski! Routerdaki CVE-2026-18167 adlı EasyMesh açığı, aynı yerel ağdaki saldırganların özel hazırlanmış veriler göndererek cihaz üzerinde kod çalıştırmasına yol açabiliyor. CVE-2026-18330 ise HTTP üzerinden yapılan yönetici girişlerinin ele geçirilmesine ve admin parolasının çözülmesine neden olabiliyor. CVE-2026-18167 — CVSS 7.7 CVE-2026-18330 — CVSS 6.1 ✅ Çözüm: 1.2.1 Build 20260527 Türkiye'de de Archer AX55 V4 için resmi TP-Link destek ve firmware sayfası bulunuyor. TP-Link Türkiye sitesinde AX55'in V1, V2, V4 ve V4.60 donanım sürümleri ayrı olarak listeleniyor; ancak söz konusu güvenlik advisory'sinde etkilenen sürüm V4 olarak belirtiliyor. AX55 V4 kullanıcıları cihazlarının hardware version ve firmware sürümünü kontrol etmeli.

    Post summary

    The advisory discloses RCE and admin credential theft vulnerabilities on TP‑Link Archer AX55 V4 routers, provides detailed technical information, and offers a specific firmware update as the fix, with no reports of active exploitation or exploit code.

    00001272
    2.2K followersView on X
  • The CyberSec Guru@thecybersecguru
    Patch

    🚨 TP-Link Archer AX55 users: check your firmware now. Two vulnerabilities affect Archer AX55 V4: 🔴 CVE-2026-18167 — EasyMesh stack-based buffer overflow → potential RCE 🔴 CVE-2026-18330 — hardcoded RSA private key → admin credential theft ⚠️ Update to 1.2.1 Build 20260527. Full technical analysis + mitigation guide 👇 https://thecybersecguru.com/exploits/tp-link-archer-ax55-cve-2026-18167-cve-2026-18330/ Read the full Archer AX55 vulnerability analysis #CyberSecurity #InfoSec #CVE #TPLink #RouterSecurity #RCE #Vulnerability #CyberAttack #Networking

    Post summary

    Two CVEs affecting the TP‑Link Archer AX55 (stack‑based buffer overflow and hardcoded RSA key) are disclosed, and a firmware update (1.2.1 Build 20260527) with a mitigation guide is recommended.

    00000160
    1.5K followersView on X

Explore more

Back to dashboard