Skip to finding

from bug to shell.

important · Wi-Fi

Crafted LAN input can crash the Archer AX55 EasyMesh daemon.

Affects

TP-Link Archer AX55 V4, an embedded Wi-Fi 6 home router running an EasyMesh daemon.

When Mesh mode is enabled, unauthenticated LAN input reaches a stack-based overflow and terminates easymesh; code execution remains unproved.

Detail and 3 sources

TP-Link published fixed firmware, but its implementation was not assessed for this brief.

Sources

ResearchSecurity Advisory: Multiple Vulnerabilities in TP-Link Archer AX55 (CVE-2026-18167 & CVE-2026-18330)ResearchDownload for Archer AX55 | TP-Link Code / PoCcvelistV5/cves/2026/18xxx/CVE-2026-18167.json at main · CVEProject/cvelistV5 · GitHub

Share this finding

Email Hacker News Reddit Mastodon Bluesky X LinkedIn Facebook Copy link

Read the full daily brief →

Every finding here carries a source that was checked before it published. If something is wrong, write to admin@fullchain.sh — corrections are published on the day they affect.

Friday, September 4, 2026