CVE-2021-40288: TP-Link Archer AX10 Firmware

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a remote unauthenticated attacker to disconnect an already connected wireless client via sending with a wireless adapter specific spoofed authentication frames

Affected products

• TP-Link Archer AX10 Firmware: before v1_211014 (fixed in v1_211014)

Published 2021-12-07. Last modified 2026-06-17.