CVE-2026-0834

UNKNOWN 0.0

Logic Vulnerability on TP-Link Archer C20 and Archer AX53

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Logic vulnerability in TP-Link Archer C20 v6.0 and Archer AX53 v1.0 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.This issue affects Archer C20 v6.0 < V6_251031. Archer AX53 v1.0 < V1_251215

CWE	CWE-290
Vendor	tp-link systems inc.
Product	archer c20 v6.0, archer ax53 v1.0
Published	Jan 21, 2026
Last Updated	Feb 26, 2026

Stay Ahead of the Next One

Get instant alerts for tp-link systems inc. archer c20 v6.0, archer ax53 v1.0

Be the first to know when new unknown vulnerabilities affecting tp-link systems inc. archer c20 v6.0, archer ax53 v1.0 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

TP-Link Systems Inc. / Archer C20 v6.0, Archer AX53 v1.0

0 < V6_251031 0 < V1_251215

References

NVD ↗ CVE.org ↗ EPSS Data ↗

tp-link.com: https://www.tp-link.com/en/support/download/archer-c20/v6/#Firmware tp-link.com: https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware mattg.systems: https://mattg.systems/posts/cve-2026-0834/

Credits

Matt Graham (mattg.systems)