CVE-2026-30816
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 before 1.7.1 Build 20260213 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed.
Risk Assessment
An attacker can gain unauthorized access to arbitrary files on the device, potentially exposing sensitive information such as passwords or keys.
Recommendation
Update the TP-Link AX53 router firmware to version 1.7.1 Build 20260213 or later, which fixes this vulnerability.
Original NVD description (English source)
An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device, potentially exposing sensitive information.This issue affects AX53 v1.0: before 1.7.1 Build 20260213.