CVE-2026-30814

CVE-2026-30814 is a stack-based buffer overflow vulnerability in the tmpServer module of TP-Link Archer AX53 v1.0 routers that allows authenticated adjacent attackers to trigger denial of service or potentially execute arbitrary code through a specially crafted configuration file. The vulnerability affects all AX53 v1.0 devices prior to firmware version 1.7.1 Build 20260213. The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with an adjacent attack vector, low complexity, and low privilege requirements. Successful exploitation could result in high-impact consequences including denial of service via segmentation fault, arbitrary code execution, unauthorized modification of device state, exposure of sensitive data, and complete compromise of device integrity. Regarding exploitation status, this vulnerability is currently inactive on the KEV catalog and shows no evidence of active exploitation in the wild. The EPSS score of 0.0003 indicates extremely low probability of exploitation compared to the broader CVE population. No public exploit code has been identified, and community attention remains minimal at this time. However, network administrators should still prioritize patching to the recommended firmware version to mitigate the underlying buffer overflow condition.