Skip to content
OpenAdvisories
High · 7.2 Public exploit CVE-2026-0834 EUVD-2026-3601GHSA-cpr3-8r3m-jjf4

Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13

Published Jan 21, 2026 · Updated Apr 28, 2026 · Assigned by TPLink

Vendor: TP-Link Systems Product: Archer C20 v5 Product: Archer C20 v6.0, Archer AX53 v1.0 Product: TL-WR841N v13 Category: Network devices

Description

Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.

This issue affects Archer C20 v6.0 < V6_251031, Archer C20 v5 <EU_V5_260317 or < US_V5_260419

Archer AX53 v1.0 <

V1_251215

TL-WR841N v13 < 0.9.1 Build 20231120 Rel.62366

Affected products

VendorProductAffectedFixed
TP-Link Systems Archer C20 v6.0, Archer AX53 v1.0 < V6_251031, < V1_251215 V6_251031
TP-Link Systems Archer C20 V5 < US_V5_260419, < EU_V5_260317 US_V5_260419
TP Link Systems TL-WR841N v13 < 0.9.1 Build 20231120 Rel.62366 0.9.1 Build 20231120 Rel.62366

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • mattgsys/CVE-2026-0834 ★ 6 · Jan 12, 2026

    Proof of Concept (PoC) for the TP-Link Device Debug Protocol (TDDP) Authentication Bypass (CVE-2026-0834)

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 1

References