CVE-2023-31188: TP-Link Archer c50 v3 Firmware

High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days.

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505', Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506', and Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616'.

Affected products

• TP-Link Archer c50 v3 Firmware: before 230505 (fixed in 230505)
• TP-Link Archer c55 Firmware: before 230506 (fixed in 230506)

Published 2023-09-06. Last modified 2026-06-17.