TP-Link Systems Inc Archer AX55 v4 vulnerabilities

2 CVEs affecting TP-Link Systems Inc Archer AX55 v4, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18330, published 2026-09-03.

More from TP-Link Systems Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-18167, published 2026-09-03. High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon…
• CVE-2026-18330, published 2026-09-03. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt…