Read the docs
TI-2026-23644 Aliases CVE-2026-30815GHSA-57xx-hp7r-53h8

OS Command Injection Vulnerability in OpenVPN Module in TP-Link AX53

Priority MEDIUM 42CWE-78Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow modification of configuration files, disclosure of sensitive information, or further compromise of device integrity. This issue affects AX53 v1.0: before 1.7.1 Build 20260213.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01645 76th percentileScored 2026-11-07
Fix Fixed AX53 v1.0 (TP-Link Systems Inc.): 1.7.1 Build 20260213

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TP-LinkAX53 v1.0before 1.7.1 Build 202602131.7.1 Build 20260213Patch availableCNA
  • AX53 v1.0 VendorTP-Link Affected before 1.7.1 Build 20260213 Fixed in 1.7.1 Build 20260213 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:tp-link:archer_ax53_firmware:*:*:*:*:*:*:*:*before 1.7.1VulnerableTP-Link
cpe:2.3:h:tp-link:archer_ax53:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
  • cpe:2.3:o:tp-link:archer_ax53_firmware:*:*:*:*:*:*:*:* Versions before 1.7.1 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:archer_ax53:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link

Remediation

  • Fix · CNA AX53 v1.0 (TP-Link Systems Inc.) Fixed in 1.7.1 Build 20260213

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    TP-Link Systems AX53 v1.0 — tp-link.com/us/support/faq/5055

    5 records Highest priority Priority MEDIUM 2 MEDIUM, 3 LOW

    Other records, highest priority first

    • TI-2026-23647 OS Command Injection Vulnerability in dnsmasq Module in TP-Link AX53Priority MEDIUM 41
    • TI-2026-23643 Buffer Overflow Vulnerability in TP-Link AX53Priority LOW 34
    • TI-2026-23646 Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53Priority LOW 30
    Show all 5 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-30815
  2. 2026-10-03 Alias added: GHSA-57xx-hp7r-53h8

References

Patch 2

Advisory 2

  • TI-2026-00615 Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13 CVSS 4.0HIGH 7.2
  • TI-2026-23647 OS Command Injection Vulnerability in dnsmasq Module in TP-Link AX53 CVSS 4.0HIGH 8.5
  • TI-2025-38874 Heap-based Buffer Overflow Vulnerability in Archer AX53 and AX12 CVSS 4.0HIGH 8.6
  • TI-2025-14235 Authenticated Command Injection in mcsd Service of TP-Link Archer AX53 CVSS 4.0HIGH 7.3
  • TI-2025-14236 Buffer Overflow in Network Probe Handling Function of TP-Link Archer AX53 + Archer AX55 CVSS 4.0HIGH 7.7
  • TI-2025-38672 Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 CVSS 4.0HIGH 7.3
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences