CVE-2021-41450: TP-Link Archer AX10 v1 Firmware

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet.

Affected products

• TP-Link Archer AX10 v1 Firmware: before 211117 (fixed in 211117)

Published 2021-12-08. Last modified 2026-07-09.