PT-2026-53984 · Tp Link · Archer Ax20 V2

Veyselxan · Published 2026-06-30 · Updated 2026-06-30 · CVE-2026-10562

Positive Technologies (AI Summary)

CVSS v4.0

5.9

Medium

Base vector

AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Archer AX20 V2 versions 2.0 through 2.1.9 Build 20230829

Description An unauthenticated URL redirection issue exists due to improper validation of user-supplied URL input within the web interface. An attacker can use URL-encoded path traversal sequences to force the embedded web server to issue HTTP 3xx redirects to external domains under the attacker's control.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2026-10562

Affected Products

Archer Ax20 V2

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-10562 · Security Note
• https://tp-link.com/en/support/download/archer-ax20/v2/#Firmware · Patch
• https://tp-link.com/en/support/faq/5156 · Vendor Advisory
• https://twitter.com/CVEnew/status/2072076789032346101 · Twitter Post
• https://twitter.com/infoflowcloud/status/2072078166290477160 · Twitter Post