Reported by 2 outlets
TP-Link Archer AX55 Flaws Enable Remote Code Execution and Admin Password Theft
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 2.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.55 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
TP-Link Archer AX55 Flaws Enable Remote Code Execution and Admin Password Theft
cyberpress.org · 39d ago · September 4th, 2026
TP-Link has disclosed two security vulnerabilities in its Archer AX55 v4 wireless router that could allow attackers on the local network to crash a core service, potentially execute arbitrary code, or steal administrator credentials from captured login traffic. The flaws, tracked as CVE-2026-18167 and CVE-2026-18330, affect the router’s EasyMesh and web-management modules . TP-Link addressed both issues in firmware version 1.2.1 Build 20260527, released for Archer AX55 hardware version V4. TP-Link Archer AX55 Flaws The more severe issue, CVE-2026-18167, is a stack-based buffer overflow in the Archer AX55 v4 EasyMesh module. It carries a CVSS v4.0 score of 7.7, rated High. According to TP-Link , the flaw can be exploited when Mesh mode is enabled. An attacker positioned on the same local network may submit specially crafted input to the EasyMesh service, causing the easymesh daemon to crash. In more serious scenarios, successful exploitation could potentially result in remote code execution on the router. The CVSS vector identifies the attack as adjacent-network-based, meaning an attacker must have access to the target’s LAN or a directly connected network. The issue does not require authentication or user interaction, but it has high attack complexity and requires a specific condition to be met. Router-level code execution is especially concerning because compromised network appliances can be used to monitor traffic, alter DNS settings , redirect users to malicious websites,
-
update from gbhackers.com
TP-Link Archer AX55 Flaws Enable Remote Code Execution and Admin Password Theft
gbhackers.com · 39d ago · September 4th, 2026
The vulnerabilities, identified as CVE-2026-18167 and CVE-2026-18330, impact the router’s EasyMesh component and […] The post TP-Link Archer AX55 Flaws Enable Remote Code Execution and Admin Password Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .