PT-2026-31409 · Openvpn+1 · Openvpn+1

Lilith >_> · CVE-2026-30816 · Published 2026-04-08 · Updated 2026-05-07

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TP-Link AX53 versions prior to 1.7.1 Build 20260213

Description A configuration issue in the OpenVPN module allows a nearby attacker with access to read arbitrary files when a malicious configuration file is processed. Successful exploitation could lead to unauthorized access to files on the device, potentially exposing sensitive information.

Recommendations Update to version 1.7.1 Build 20260213 or later.

Fix

Weakness Enumeration

CWE-15

CWE-610

Related Identifiers

CVE-2026-30816

Affected Products

Openvpn

Tp-Link Ax53

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-30816 · Security Note
• https://tp-link.com/us/support/faq/5055 · Vendor Advisory
• https://tp-link.com/my/support/download/archer-ax53/v1/#Firmware · Patch
• https://tp-link.com/en/support/download/archer-ax53/v1/#Firmware · Patch
• https://twitter.com/VulmonFeeds/status/2042077898962555047 · Twitter Post
• https://talosintelligence.com/vulnerability_reports · Note
• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2304 · Note
• https://t.me/cveNotify/162576 · Telegram Post