CVE-2026-18167CWE-121

CVE-2026-18167

published September 4, 2026

CVSS
7.7
EPSS
0%
Percentile
16.3
In the wild
Unconfirmed
What it is

A

stack-based buffer overflow vulnerability exists in the EasyMesh module of

TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit

crafted input that causes the easymesh daemon to crash and may potentially

achieve remote code execution on the device.

Successful

exploitation may cause the EasyMesh daemon to crash and may potentially allow

remote code execution when Mesh mode is enabled. This

may result in high impact to the confidentiality, integrity, and availability

of the affected device.

The record
Technical detail
CVSS
7.7 · NONE
CVSS v4.0
7.7 · CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
EPSS
0.00256 · 16.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-09-04T03:17Z
References (2)
https://www.tp-link.com/us/support/download/archer-ax55/v4/#Firmware · f23511db-6c3e-4e32-a477-6aa17d310630https://www.tp-link.com/us/support/faq/5279/ · f23511db-6c3e-4e32-a477-6aa17d310630
EPSS history
Timeline
  • 05 SEP 03:40Z
    EPSS moved — → 0%
    epss
  • 03 SEP 22:24Z
    Stack-based buffer overflow in TP-Link Archer AX55 v4
    cvelistv5