TP-Link Archer AX53 Flaws Enable Command Injection via OpenVPN and dnsmasq
Vulnerability Disclosure · 6 sources · Updated 4mo ago · First seen Apr 8, 2026
TP-Link Archer AX53 v1.0 routers were found to contain two high-severity OS command injection vulnerabilities, tracked as CVE-2026-30815 and CVE-2026-30818, affecting the device's OpenVPN and dnsmasq modules. In both cases, an authenticated attacker on an adjacent network can supply a specially crafted configuration file to trigger arbitrary command execution because of insufficient input validation, a weakness classified as CWE-78.
Successful exploitation could let an attacker alter router configuration, access sensitive information, and undermine overall device integrity and availability. The flaws affect Archer AX53 v1.0 firmware releases prior to 1.7.1 Build 20260213, and the CVSS v4.0 assessments indicate low attack complexity under adjacent-network conditions with high impact across confidentiality, integrity, and availability.
