CVE-2023-39935: TP-Link Archer c5400 Firmware

High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Archer C5400 firmware versions prior to 'Archer C5400(JP)_V2_230506' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

Affected products

• TP-Link Archer c5400 Firmware: before 230506 (fixed in 230506)

Published 2023-09-06. Last modified 2026-06-17.