CVE-2023-40531: TP-Link Archer AX6000 Firmware

High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Archer AX6000 firmware versions prior to 'Archer AX6000(JP)_V1_1.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

Affected products

• TP-Link Archer AX6000 Firmware: before 1.3.0 (fixed in 1.3.0)

Published 2023-09-06. Last modified 2026-06-17.