Critical severity · published Mar 20, 2026
CVE-2025-15608
Buffer Overflow in Network Probe Handling Function of TP-Link Archer AX53 + Archer AX55
9.8
CVSS
0.7%
EPSS
No
On KEV
Description
This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution through complex heap-spray techniques. Successful exploitation may result in repeated service unavailability and, in certain scenarios, allow an attacker to gain control of the device.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AV
AX53 v1 · TP-Link Systems Inc.
before 251029 · source: vendor
AV
AX55 v4 · TP-Link Systems Inc.
before (US)_1.2.1 Build 20260527 · source: vendor
AV
AX55 v4.6 · TP-Link Systems Inc.
before (US)_1.2.1 Build 20260527 · source: vendor