An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a spec…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 8, 2026 · NIST NVD

   Detected

   An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow the attacker to modify device configuration, access sensitive information, or further compromise system integrity.

2. Jul 25, 2026 · NIST NVD

   Updated

   An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow the attacker to modify device configuration, access sensitive information, or further compromise system integrity.

Affected

• cpe tp-link/archer ax53 firmwareversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-30818

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-30818

  An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may a

  nvd.nist.gov

References

• Third Party Advisory · talosintelligence.com
• Reference · talosintelligence.com
• Product · tp-link.com
• Product · tp-link.com
• Vendor Advisory · tp-link.com