CVE-2026-30817
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 before 1.7.1 Build 20260213 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed.
Risk Assessment
An attacker can gain unauthorized access to arbitrary files on the device, potentially exposing sensitive information such as passwords or keys.
Recommendation
Update the TP-Link AX53 router firmware to version 1.7.1 Build 20260213 or later, which fixes this vulnerability.
Original NVD description (English source)
An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device, potentially exposing sensitive information.This issue affects AX53 v1.0: before 1.7.1 Build 20260213.