TP-Link Systems Inc. Archer AX55 v4 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting TP-Link Systems Inc. Archer AX55 v4: 2 record(s), with affected versions and fixes.
CVE-2026-18330
Medium · 6.1
CWE-321 Sep 3, 2026
Hardcoded Shared RSA-1024 Private Key in TP-Link Archer AX55 v4
A hard-coded
cryptographic key vulnerability exists in the web module of TP-Link Archer
AX55 v4. A LAN attacker who captures an HTTP login session may use the known
shared RSA private key to decrypt the administrator password; the
weakened AES session key further reduces the effort required to
compromise session confidentiality.
Successful
exploitation may disclose the administrator password captured from an HTTP
login session and compromise session confidentiality.
CVE-2026-18167
High · 7.7
CWE-121 Sep 3, 2026
Stack-based buffer overflow in TP-Link Archer AX55 v4
A
stack-based buffer overflow vulnerability exists in the EasyMesh module of
TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit
crafted input that causes the easymesh daemon to crash and may potentially
achieve remote code execution on the device.
Successful
exploitation may cause the EasyMesh daemon to crash and may potentially allow
remote code execution when Mesh mode is enabled. This
may result in high impact to the confidentiality, integrity, and availability
of the affected device.