InfoSecBulletin Cybersecurity for mankind
TP-Link has given an urgent security warning about its Archer AX53 v1.0 router. There are 5 different flaws that could let hackers take over the device or steal private information. These issues affect important parts like tmpserver, dnsmasq, and OpenVPN.
The biggest threats found are OS Command Injection in the router’s communication and networking modules. These issues let an attacker who is nearby get past security and run system commands.
CVE-2026-18574
Check Point Authentication Bypass Hits Management Server
TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise
ExfilSquad releases info of over 100,000 UK police officers, staff
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
CVE-2026-30818 (CVSS 8.5): This high-severity flaw in the dnsmasq module allows an attacker to “execute arbitrary code when a specially crafted configuration file is processed due to insufficient input validation”. Successful exploitation “may allow the attacker to modify device configuration, access sensitive information, or further compromise system integrity”.
CVE-2026-30815 (CVSS 8.5): A similar injection vulnerability exists in the OpenVPN module. Attackers can execute commands that “may allow modification of configuration files, disclosure of sensitive information, or further compromise of device integrity”.
The advisory points out a buffer overflow issue (CVE-2026-30814) in the tmpServer module, which has a CVSS score of 7.3.
A buffer overflow in this module lets an attacker nearby to cause a segmentation fault and maybe run unwanted code using a special file. If they succeed, this could change the device settings, reveal sensitive information, or harm the device’s safety.
TP-Link also fixed two issues that let someone read files on a local system (CVE-2026-30816 and CVE-2026-30817). These problems happen when a harmful configuration file is used. This type of unauthorized access “potentially exposing sensitive information” stored on the device.
The vulnerabilities are confirmed to affect the following specific hardware and software configuration:
Product Model: Archer AX53 v1.0
Affected Version: All versions prior to 1.7.1 Build 20260213
TP-Link advises users with affected devices to act quickly to protect their network and personal data.
