CVE-2022-41541: TP-Link AX10 Firmware

High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days.

TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers are able to login to the web application as an admin user.

Affected products

• TP-Link AX10 Firmware: version v1_211117 only

Published 2022-10-18. Last modified 2026-06-17.