VulnSocial

CVE-2026-30815General(tp-link / archer_ax53)

LOWCVSS 8.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch tp-link archer_ax53 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow modification of configuration files, disclosure of sensitive information, or further compromise of device integrity. This issue affects AX53 v1.0: before 1.7.1 Build 20260213.

tp-link CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • archer_ax53
  • archer_ax53_firmware

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-04-13); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
tp-link
Products
archer_ax53archer_ax53_firmware

1 version affected across 2 products

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-04-13: 1Mentions · 2026-04-16: 1Mentions · 2026-08-04: 1Patch / Workaround · 2026-08-04: 1Technical Details · 2026-08-04: 104-1304-1608-04
Signal classification3 categories
General
133.3%
Disclosure
133.3%
Patch
133.3%
Referenced assets1 URL
Classification over time
DateTotalLabels
2026-04-131
General1
2026-04-161
Disclosure1
2026-08-041
Patch1
Full discourse3 posts
  • セキュリティ対策Lab@securityLab_jp
    General

    TP-Link Archer AX53に複数の脆弱性(CVE-2026-30815,CVE-2026-30818) https://rocket-boys.co.jp/security-measures-lab/tp-link-archer-ax53-cve-2026-30815-cve-2026-30818/ #セキュリティ対策Lab #セキュリティ #Security #CybersecurityNews

    Post summary

    The post announces TP‑Link Archer AX53 vulnerabilities CVE‑2026‑30815 and CVE‑2026‑30818, referencing a link for further information, but offers no details about exploitation, patches, or technical aspects.

    00010131
    380 followersView on X
  • ٓ@1TSA1
    Patch

    @SAUDICERT يتعلق التحذير بثغرات خطيرة في router Archer AX53 مثل حقن أوامر النظام (CVE-2026-30815) وفيض المخزن المؤقت (CVE-2026-30814). • يُوصى بتثبيت الإصدار 1.7.1 Build 20260213 أو أحدث من البرمجيات الثابتة عبر موقع TP-Link للحماية من الاستغلال .

    Post summary

    SAUDICERT warns about command injection and cache poisoning flaws in the TP‑Link Archer AX53 and urges users to upgrade to firmware 1.7.1 Build 20260213 or later to mitigate the risks.

    00000106
    25.7K followersView on X
  • アイティフィックス-パソコンスマホの訪問サポート@itfix_pcrescue
    Disclosure

    TP-Link Archer AX53に複数の脆弱性(CVE-2026-30815,CVE-2026-30818) https://rocket-boys.co.jp/security-measures-lab/tp-link-archer-ax53-cve-2026-30815-cve-2026-30818/

    Post summary

    The post announces the presence of two new vulnerabilities, CVE‑2026‑30815 and CVE‑2026‑30818, in the TP‑Link Archer AX53 router and directs readers to a link for further details.

    0000040
    18 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWtp-linkarcher_ax531.0--
OStp-linkarcher_ax53_firmware---

Explore more

Back to dashboardtp-link CVEsarcher_ax53 vulnerabilities