CVE-2026-0834

HIGH

8.8

Description

Logic vulnerability in TP-Link Archer C20 v6.0 and Archer AX53 v1.0 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.This issue affects Archer C20 v6.0 < V6_251031. Archer AX53 v1.0 < V1_251215

CVE Details

CVSS v3.1 Score8.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorADJACENT_NETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published1/21/2026

Last Modified2/10/2026

Sourcenvd

Honeypot Sightings0

Affected Products

tp-link:archer_ax53tp-link:archer_ax53_firmwaretp-link:archer_c20tp-link:archer_c20_firmware

Weaknesses (CWE)

CWE-290

References

https://mattg.systems/posts/cve-2026-0834/(f23511db-6c3e-4e32-a477-6aa17d310630)

https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware(f23511db-6c3e-4e32-a477-6aa17d310630)

https://www.tp-link.com/en/support/download/archer-c20/v6/#Firmware(f23511db-6c3e-4e32-a477-6aa17d310630)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.