Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a specially crafted configuration file. Successful exploitation may cause a crash and could allow arbitrary code execution, enabling modification of device state, exposure of sensitive data, or further compromise of device integrity. This issue affects AX53 v1.0: before 1.7.1 Build 20260213.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
@SAUDICERT يتعلق التحذير بثغرات خطيرة في router Archer AX53 مثل حقن أوامر النظام (CVE-2026-30815) وفيض المخزن المؤقت (CVE-2026-30814). • يُوصى بتثبيت الإصدار 1.7.1 Build 20260213 أو أحدث من البرمجيات الثابتة عبر موقع TP-Link للحماية من الاستغلال .
Post summary
SAUDICERT alerts about command injection and prefix cache vulnerabilities in the Archer AX53 router, and urges users to apply the latest TP‑Link firmware to mitigate the risks.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | archer_ax53 | 1.0 | - | - |
| OS | tp-link | archer_ax53_firmware | - | - | - |