CVE-2026-30818

CVE-2026-30818 is an OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 routers. The flaw stems from insufficient input validation when processing configuration files, allowing authenticated adjacent attackers to execute arbitrary code and potentially modify device configurations, access sensitive information, or compromise system integrity. The vulnerability affects Archer AX53 v1.0 devices before firmware version 1.7.1 Build 20260213. The vulnerability carries a CVSS score of 8.0 (HIGH) with an adjacent network attack vector requiring low complexity and low-level authentication privileges. The attack requires no user interaction and can result in high-impact compromise across confidentiality, integrity, and availability. With an EPSS score of 0.0014, the vulnerability represents relatively lower exploitation probability compared to the broader CVE population. There is currently no evidence of active exploitation or public exploit code availability. The vulnerability has not been added to the CISA Known Exploited Vulnerabilities catalog, and community attention remains minimal. Organizations should prioritize patching to firmware version 1.7.1 Build 20260213 or later, particularly if their devices operate in environments accessible to adjacent authenticated users.