CVE-2026-18167

Published Sep 3, 2026

Last updated 2 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-18167 describes a stack-based buffer overflow vulnerability found within the EasyMesh module of the TP-Link Archer AX55 v4 router. This flaw can be exploited when the Mesh mode is active on the device. A local area network (LAN) attacker can leverage this vulnerability by submitting specially crafted input. This malicious input has the potential to cause the easymesh daemon to crash, and in some scenarios, it may also enable remote code execution on the affected device.

Description: A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation may cause the EasyMesh daemon to crash and may potentially allow remote code execution when Mesh mode is enabled. This may result in high impact to the confidentiality, integrity, and availability of the affected device.
Source: f23511db-6c3e-4e32-a477-6aa17d310630
NVD status: Deferred

Risk scores

CVSS 4.0

Type: Secondary
Base score: 7.7
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: HIGH

Weaknesses

f23511db-6c3e-4e32-a477-6aa17d310630: CWE-121

Hype score: Not currently trending

References