CVE-2026-18167

Name of the Vulnerable Software and Affected Versions TP-Link Archer AX55 v4 versions prior to 1.2.1 Build 20260527

Description A stack-based buffer overflow exists in the EasyMesh module. When Mesh mode is enabled, a LAN attacker can submit crafted input to the EasyMesh daemon, which may cause the daemon to crash or potentially allow remote code execution on the device. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory.

Recommendations Update to firmware 1.2.1 Build 20260527 or later. Disable Mesh mode as a temporary mitigation measure.