Low severity · published May 19, 2026
CVE-2026-5511
Information Disclosure via Diagnostic Interface Due to Improper Input Validation on TP-Link's Archer AX72
2.7
CVSS
0.2%
EPSS
No
On KEV
Description
In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnostic command usage information.  An authenticated attacker with administrative privileges could exploit this issue to confirm the presence of the diagnostic utility and view its valid command-line syntax and options.  The exposed information is limited in scope and does not include sensitive system data.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Archer AX72 (SG) v1.0 · TP-Link Systems Inc.
before 1.4.6 Build 20260112 rel.66206 · source: vendor
AA
Archer Ax72 Firmware · Tp-link
before 1.4.6 · source: NVD