TP-Link Archer AX53 Firmware vulnerabilities

18 CVEs affecting TP-Link Archer AX53 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-30818, published 2026-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-30815, published 2026-04-08. High severity, CVSS 8.0. EPSS: 2.2% chance of exploitation in the next 30 days. An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration…
CVE-2025-15607, published 2026-03-20. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log redirection to arbitrary files and concatenation of unvalidated file…
CVE-2026-30818, published 2026-04-08. High severity, CVSS 8.0. EPSS: 1.8% chance of exploitation in the next 30 days. An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a specially crafted configuration file…
CVE-2025-15608, published 2026-03-20. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer…
CVE-2026-30814, published 2026-04-08. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via…
CVE-2025-62673, published 2026-02-03. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. Heap-based Buffer Overflow vulnerability in Archer AX53 v1.0 and AX12 v1.0 (tdpserver modules) allows adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a…
CVE-2025-62405, published 2026-02-03. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code…
CVE-2025-62404, published 2026-02-03. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code…
CVE-2025-61983, published 2026-02-03. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code…
CVE-2025-62501, published 2026-02-03. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. SSH Hostkey misconfiguration vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM)…

Latest

CVE-2026-30817, published 2026-04-08. Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days. An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is…
CVE-2026-30816, published 2026-04-08. Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days. An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is…