PT-2026-31411 · Tp Link Systems+1 · Ax53 V1.0+1

Lilith >_> · Published 2026-04-08 · Updated 2026-05-07 · CVE-2026-30818

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions TP-Link Archer AX53 v1.0 versions prior to 1.7.1 Build 20260213

Description Insufficient input validation in the dnsmasq module allows an authenticated adjacent attacker to execute arbitrary code by processing a specially crafted configuration file. This OS command injection can lead to modified device configurations, unauthorized access to sensitive information, or compromised system integrity.

Recommendations Update to version 1.7.1 Build 20260213 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-30818

Affected Products

Ax53 V1.0

Archer Ax53 Firmware

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-30818 · Security Note
• https://tp-link.com/us/support/faq/5055 · Vendor Advisory
• https://tp-link.com/my/support/download/archer-ax53/v1/#Firmware · Patch
• https://tp-link.com/en/support/download/archer-ax53/v1/#Firmware · Patch
• https://talosintelligence.com/vulnerability_reports · Note
• https://t.me/cveNotify/162578 · Telegram Post
• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2306 · Note