Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
TP-Link Archer AX55 Flaws Enable Remote Code Execution and Admin Password Theft
Excerpt
TP-Link has disclosed two security vulnerabilities in its Archer AX55 v4 wireless router that could allow attackers on the local network to crash a core service, potentially execute arbitrary code, or steal administrator credentials from captured login traffic. The flaws, tracked as CVE-2026-18167 and CVE-2026-18330, affect the router’s EasyMesh and web-management modules . TP-Link addressed both issues in firmware version 1.2.1 Build 20260527, released for Archer AX55…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-18330 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-18167 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…