CVE detail
CVE-2026-30816
An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device, potentially exposing sensitive information.This issue affects AX53 v1.0: before 1.7.1 Build 20260213.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2304www.talosintelligence.com
No excerpt available.
Exploitwww.talosintelligence.comApr 8, 2026, 7:25 PM - https://www.tp-link.com/us/support/faq/5055/www.tp-link.com
No excerpt available.
Vendor Advisorywww.tp-link.comApr 8, 2026, 7:25 PM No excerpt available.
Vendor Advisorywww.tp-link.comApr 8, 2026, 7:25 PMNo excerpt available.
Vendor Advisorywww.tp-link.comApr 8, 2026, 7:25 PM- https://talosintelligence.com/vulnerability_reports/talosintelligence.com
No excerpt available.
Exploittalosintelligence.comApr 8, 2026, 7:25 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-30817CVSS 6.8 · Medium
An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious confi…
- CVE-2026-0418CVSS 4.3 · Medium
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
- CVE-2024-10979CVSS 8.8 · High
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often su…
- CVE-2023-6154CVSS 7.8 · High
A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows…
- CVE-2024-23639CVSS 5.1 · Medium
Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy…
- CVE-2023-4704CVSS 4.9 · Medium
External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git.