PT-2026-31408

CVE-2026-30815

Published

2026-04-03

Updated

2026-05-07

Description by

CVSS 4.0

8.5

High

MetricsAV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions TP-Link Archer AX53 v1.0 versions prior to 1.7.1 Build 20260213

Description An OS command injection issue in the OpenVPN module allows an authenticated adjacent attacker to execute system commands. This occurs during the processing of a specially crafted configuration file due to insufficient input validation. Successful exploitation could lead to the modification of configuration files, disclosure of sensitive information, or compromise of device integrity.

Recommendations Update to version 1.7.1 Build 20260213 or later.

Exploitability

Fix

Impacts

Researchers

Lilith >_>

Vendors

Affected products

Weakness enumeration

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

Related identifiers

CVE-2026-30815