CVE-2026-0834

HIGH EPSS 32.0%
Published Jan 21, 20265mo ago · Modified Jun 17, 20261w ago
7.2 CVSS 4.0
High
Find Similar
Published Jan 21, 2026 5mo ago
Last Modified Jun 17, 2026 1w ago

Description

Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability. This issue affects Archer C20 v6.0 < V6_251031, Archer C20 v5 <EU_V5_260317 or < US_V5_260419 Archer AX53 v1.0 < V1_251215 TL-WR841N v13 < 0.9.1 Build 20231120 Rel.62366

CVSS Details

Base Score
7.2
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Adjacent
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
32.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-290

Affected Products 4

VendorProductVersionRange
tp-linkarcher_ax53_firmware1.0any
tp-linkarcher_ax53*any
tp-linkarcher_c20_firmware6.0any
tp-linkarcher_c20*any

References 7

  • mattg.systems https://mattg.systems/posts/cve-2026-0834/
    Permissions Required
  • tp-link.com https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware
    Product
  • tp-link.com https://www.tp-link.com/en/support/download/archer-c20/v5/#Firmware
  • tp-link.com https://www.tp-link.com/en/support/download/archer-c20/v6/#Firmware
    Product
  • tp-link.com https://www.tp-link.com/us/support/download/archer-c20/v5/#Firmware
  • tp-link.com https://www.tp-link.com/us/support/download/tl-wr841n/v13/#Firmware
  • tp-link.com https://www.tp-link.com/us/support/faq/4905/

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.