CVE-2024-54126: TP-Link Archer c50 Firmware

High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days.

This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicious firmware which could lead to complete compromise of the targeted device.

Affected products

• TP-Link Archer c50 Firmware
• TP-Link Archer c50 Wireless Router

Published 2024-12-05. Last modified 2026-06-17.