CVE-2026-18167

UNKNOWN 0.0

Stack-based buffer overflow in TP-Link Archer AX55 v4

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation may cause the EasyMesh daemon to crash and may potentially allow remote code execution when Mesh mode is enabled. This may result in high impact to the confidentiality, integrity, and availability of the affected device.

CWE	CWE-121
Vendor	tp-link systems inc.
Product	archer ax55 v4
Published	Sep 3, 2026

Stay Ahead of the Next One

Get instant alerts for tp-link systems inc. archer ax55 v4

Be the first to know when new unknown vulnerabilities affecting tp-link systems inc. archer ax55 v4 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

TP-Link Systems Inc. / Archer AX55 v4

0 < 1.2.1 Build 20260527

References

NVD ↗ CVE.org ↗ EPSS Data ↗

tp-link.com: https://www.tp-link.com/us/support/download/archer-ax55/v4/#Firmware tp-link.com: https://www.tp-link.com/us/support/faq/5279/

Credits

Tianchang Yang and Syed Rafiul Hussain (SyNSec Lab, Penn State University)