PT-2026-31407 · Tp Link Systems+1 · Ax53 V1.0+1

Lilith >_> · Published 2026-04-08 · Updated 2026-05-07 · CVE-2026-30814

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link Archer AX53 v1.0 versions prior to 1.7.1 Build 20260213

Description A stack-based buffer overflow occurs in the tmpServer module. An authenticated adjacent attacker can trigger a segmentation fault and potentially execute arbitrary code by using a specially crafted configuration file. This may lead to a system crash, modification of device state, exposure of sensitive data, or compromise of device integrity.

Recommendations Update to version 1.7.1 Build 20260213 or later.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2026-30814

Affected Products

Ax53 V1.0

Archer Ax53 Firmware

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-30814 · Security Note
• https://tp-link.com/us/support/faq/5055 · Vendor Advisory
• https://tp-link.com/my/support/download/archer-ax53/v1/#Firmware · Patch
• https://tp-link.com/en/support/download/archer-ax53/v1/#Firmware · Patch
• https://talosintelligence.com/vulnerability_reports · Note
• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2302 · Note
• https://t.me/cveNotify/162574 · Telegram Post