CVE-2022-40486

PoC —

CVSS 3.1

8.8 high

EPSS

2%p75

Published

Sep 28, 2022 (Sep 28, 2022)

Modified

Jun 17, 2026

Description

TP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. 57450(5553) was discovered to allow authenticated attackers to execute arbitrary code via a crafted backup file.

Vendors: tp-link
Products: archer ax10 v1 firmware
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.