TP-Link Archer AX55 Flaws Enable Remote Code Execution and Admin Password Theft

TP-Link published an advisory for the Archer AX55 (V4) fixing two vulnerabilities in firmware 1.2.1 Build 20260527: CVE-2026-18167 (stack-based buffer overflow in EasyMesh that can crash the easymesh daemon and potentially enable remote code execution when Mesh mode is enabled) and CVE-2026-18330 (a hardcoded RSA-1024 private key in the web login module that can let a local attacker decrypt admin passwords). The advisory urges firmware updates and recommends disabling HTTP admin access, using HTTPS, restricting management to trusted devices, and monitoring connected clients.