Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Priority MEDIUM 41

An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a specially crafted configuration file is processed due to…

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.01292 Published 2026-04-08 Fixed in 1.7.1 Build 20260213 CWE-78
Priority LOW 30

An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed.

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.0036 Published 2026-04-08 Fixed in 1.7.1 Build 20260213 CWE-15
Priority LOW 30

An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed.

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.003 Published 2026-04-08 Fixed in 1.7.1 Build 20260213 CWE-15
Priority MEDIUM 42

An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to…

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.01645 Published 2026-04-08 Fixed in 1.7.1 Build 20260213 CWE-78
Priority LOW 34

A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a specially crafted c…

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00438 Published 2026-04-08 Fixed in 1.7.1 Build 20260213 CWE-121