CVE-2026-18167

Stack-based buffer overflow in TP-Link Archer AX55 v4

State: Published
Severity: 7.7 High
Published: Sep 3, 2026
Updated: Sep 4, 2026
Reserved: Jul 28, 2026

Description

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device.

Successful exploitation may cause the EasyMesh daemon to crash and may potentially allow remote code execution when Mesh mode is enabled. This may result in high impact to the confidentiality, integrity, and availability of the affected device.

Scores

CVSS	Score	Vector	Source
4.0	7.7 High	CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L	TPLink

Weaknesses

CWE-121 Stack-based buffer overflow

Affected Products

Product	Versions
Archer AX55 v4TP-Link Systems Inc.	before 1.2.1 Build 20260527Affected

References

https://www.tp-link.com/us/support/download/archer-ax55/v4/#Firmwarepatch
https://www.tp-link.com/us/support/faq/5279/vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.