CVE-2026-18167: Stack-based buffer overflow in TP-Link Archer AX55 v4
A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device.
Successful exploitation may cause the EasyMesh daemon to crash and may potentially allow remote code execution when Mesh mode is enabled. This may result in high impact to the confidentiality, integrity, and availability of the affected device.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
TP-Link Archer AX55 v4 devices with Mesh mode enabled are exposed. Exploitation requires an attacker to be on the local network.
What does an attacker need to exploit it?
The attacker must be able to submit crafted input to the EasyMesh module from the LAN while Mesh mode is enabled. The described impact includes crashing the easymesh daemon and potential remote code execution on the device.
What can be done if firmware updates cannot be applied immediately?
Disable Mesh mode if it is not required and restrict untrusted access to the local network. This reduces exposure because the issue is described as reachable by a LAN attacker when Mesh mode is enabled.