PT-2026-31410

CVE-2026-30817

Published

2026-04-03

Updated

2026-05-07

Description by

CVSS 4.0

6.8

Medium

MetricsAV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TP-Link AX53 v1.0 versions prior to 1.7.1 Build 20260213

Description An external configuration control issue in the OpenVPN module allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. This can lead to unauthorized access to sensitive information on the device.

Recommendations Update to version 1.7.1 Build 20260213 or later.

Exploitability

Fix

Researchers

Lilith >_>

Vendors

Affected products

Weakness enumeration

CWE-15: External Control of System or Configuration Setting

CWE-610: Externally Controlled Reference to a Resource in Another Sphere

Related identifiers

CVE-2026-30817