Vulnerability in Tp-link Archer_ax53
CVE-2026-0834
Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials…
EPSS: 0.000 (3.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Tp-link Archer_ax53
- Tp-link Archer_ax53_firmware — versions 1.0
- Tp-link Archer_c20
- Tp-link Archer_c20_firmware — versions 6.0
- Tp Link Systems Inc. Tl-wr841n V13 — versions 0
- Tp-link Systems Inc. Archer C20 V5 — versions 0
- Tp-link Systems Inc. Archer C20 V6.0, Ax53 V1.0 — versions 0
Weakness classification (CWE)
References
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Permissions Required)
- f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
Frequently asked questions
- What is CVE-2026-0834?
- CVE-2026-0834 is a high-severity vulnerability in Tp-link Archer_ax53, classified under Authentication Bypass by Spoofing. CVSS score: 8.8/10. Published 2026-01-21.
- How severe is CVE-2026-0834?
- High severity. CVSS v3 base score is 8.8 out of 10.