CVE-2026-30818 Details
Description
An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow the attacker to modify device configuration, access sensitive information, or further compromise system integrity. This issue affects AX53 v1.0: before 1.7.1 Build 20260213.
A command injection vulnerability has been identified in the dnsmasq module of the TP-Link Archer AX53 v1.0 router. This vulnerability allows an authenticated adjacent attacker to execute arbitrary code by exploiting insufficient input validation in specially crafted configuration files. Successful exploitation could lead to unauthorized modification of device settings, access to sensitive information, or a broader compromise of system integrity.
Users are advised to update to the latest firmware version, 1.7.1 Build 20260213, available on the TP-Link official website. Note that this update is irreversible and cannot be downgraded.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 8, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2306 | CVE | |
| https://talosintelligence.com/vulnerability_reports/ | TPLink | Third Party Advisory |
| https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware | TPLink | Product |
| https://www.tp-link.com/my/support/download/archer-ax53/v1/#Firmware | TPLink | Product |
| https://www.tp-link.com/us/support/faq/5055/ | TPLink | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | TPLink |
Affected Products
| Product | Versions |
|---|---|
| tp-link archer ax53 firmware | < 1.7.1 |
CPE
Remediation
| |
| tp-link archer ax53 | 1.0 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 25, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | TPLink |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 7, 2026 | CVE Modified | CVE |
| Apr 14, 2026 | Initial Analysis | [email protected] |
| Apr 8, 2026 | New CVE Received | TPLink |