Tp-link Archer Ax53 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Archer Ax53 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (18)

• CVE-2025-15608 — CVSS 9.8 (critical): This vulnerability in AX53 v1 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated…
• CVE-2025-15607 — CVSS 9.8 (critical): A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log…
• CVE-2026-0834 — CVSS 8.8 (high): Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent…
• CVE-2025-62501 — CVSS 8.1 (high): SSH Hostkey misconfiguration vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows attackers to obtain device credentials…
• CVE-2025-59487 — CVSS 8.0 (high): Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a…
• CVE-2025-61944 — CVSS 8.0 (high): Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a…
• CVE-2025-61983 — CVSS 8.0 (high): Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a…
• CVE-2025-62404 — CVSS 8.0 (high): Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a…
• CVE-2025-62405 — CVSS 8.0 (high): Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a…
• CVE-2025-62673 — CVSS 8.0 (high): Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tdpserver modules) allows adjacent attackers to cause a segmentation…
• CVE-2026-30814 — CVSS 8.0 (high): A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a…
• CVE-2026-30815 — CVSS 8.0 (high): An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to…
• CVE-2026-30818 — CVSS 8.0 (high): An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to…
• CVE-2025-58077 — CVSS 8.0 (high): Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a…
• CVE-2025-58455 — CVSS 8.0 (high): Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a…
• CVE-2025-59482 — CVSS 8.0 (high): Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a…
• CVE-2026-30817 — CVSS 5.7 (medium): An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to…
• CVE-2026-30816 — CVSS 5.7 (medium): An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to…