PT-2026-31411

CVE-2026-30818

Published

2026-04-03

Updated

2026-05-07

Description by

CVSS 4.0

8.5

High

MetricsAV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions TP-Link Archer AX53 v1.0 versions prior to 1.7.1 Build 20260213

Description Insufficient input validation in the dnsmasq module allows an authenticated adjacent attacker to execute arbitrary code by processing a specially crafted configuration file. This OS command injection can lead to modified device configurations, unauthorized access to sensitive information, or compromised system integrity.

Recommendations Update to version 1.7.1 Build 20260213 or later.

Exploitability

Fix

Impacts

Researchers

Lilith >_>

Vendors

Affected products

Weakness enumeration

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

Related identifiers

CVE-2026-30818