Skip to main content

TP-Link EUVDEUVD-2026-20548

| CVE-2026-30817 MEDIUM
External Control of System or Configuration Setting (CWE-15)
2026-04-08 TPLink GHSA-wmw7-jpm9-rmff
TP-Link Authentication Bypass
6.8
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
6.8 MEDIUM
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

4
EUVD ID Assigned
Apr 08, 2026 - 19:31 euvd
EUVD-2026-20548
Analysis Generated
Apr 08, 2026 - 19:31 vuln.today
Patch released
Apr 08, 2026 - 19:31 nvd
Patch available
CVE Published
Apr 08, 2026 - 17:53 nvd
MEDIUM 6.8

DescriptionCVE.org

An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device, potentially exposing sensitive information.This issue affects AX53 v1.0: before 1.7.1 Build 20260213.

AnalysisAI

External configuration control in TP-Link AX53 v1.0 OpenVPN module allows authenticated adjacent attackers to read arbitrary files by processing malicious configuration files, exposing sensitive device information. The vulnerability affects AX53 v1.0 prior to firmware build 1.7.1 Build 20260213 and requires high-level authentication and network adjacency to exploit. A vendor-released patch is available.

Technical ContextAI

The vulnerability exists in the OpenVPN module configuration handling of TP-Link AX53 wireless routers. It is classified as CWE-15 (External Control of System or Device Configuration), which indicates improper validation or sanitization of configuration file inputs. When a malicious OpenVPN configuration file is processed by the device, an authenticated user with high privileges on an adjacent network can manipulate the configuration to trigger arbitrary file read operations. This reflects a failure to implement proper input validation and access controls on configuration file processing, allowing configuration parameters to be abused for file system traversal or direct file access.

RemediationAI

Vendor-released patch: Upgrade TP-Link AX53 v1.0 firmware to version 1.7.1 Build 20260213 or later. Firmware updates are available from TP-Link's official support pages (https://www.tp-link.com/my/support/download/archer-ax53/v1/#Firmware for Malaysia region and https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware for international). Restrict OpenVPN configuration upload and modification to trusted administrators only. Review and validate any OpenVPN configuration files before importing them into the device. Detailed FAQ guidance is available at https://www.tp-link.com/us/support/faq/5055/.

More in TP-Link

View all
CVE-2015-3035 HIGH POC
7.5 Apr 22

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before

CVE-2013-2578 CRITICAL POC
10.0 Oct 11

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models be
CVE-2021-41653 CRITICAL POC
9.8 Nov 13

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to r
CVE-2022-25061 CRITICAL POC
9.8 Feb 25

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_set
CVE-2015-3036 CRITICAL POC
10.0 May 21

Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in c
CVE-2012-5687 HIGH POC
7.8 Nov 01

Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13
CVE-2022-25060 CRITICAL POC
9.8 Feb 25

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_sta
CVE-2025-9377 HIGH
8.6 Aug 29

TP-Link Archer C7 and TL-WR841N routers contain an authenticated remote command execution vulnerability in the Parental

CVE-2024-57049 CRITICAL POC
9.8 Feb 18

A vulnerability in the TP-Link Archer c20 router with firmware version V6.6_230412 and earlier permits unauthorized indi
CVE-2017-13772 HIGH POC
8.8 Oct 23

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated

CVE-2022-25064 CRITICAL POC
9.8 Feb 25

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the functio
CVE-2022-30075 HIGH POC
8.8 Jun 09

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote

Same weakness CWE-15 – External Control of System or Configuration Setting

View all
CVE-2026-45087 CRITICAL POC
10.0
CVE-2024-4326 CRITICAL POC
9.8
CVE-2023-50252 CRITICAL POC
9.8
CVE-2023-46248 HIGH POC
8.8
CVE-2023-43323 MEDIUM POC
6.5
CVE-2026-22708 CRITICAL
9.8
CVE-2026-46399 CRITICAL
9.4
CVE-2021-38453 CRITICAL
9.1

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

EUVD-2026-20548 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy