Hardwarev5
Beta build · 10-13-2026-r66345
Browse firmware downloadsdownload1.dd-wrt.comRouter
Hardwarev5
Beta build · 10-13-2026-r66345
Browse firmware downloadsdownload1.dd-wrt.comReplace router software with a customizable system for network controls and community packages.
Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.
Check the project and hardware shown for each feature.
tp-link archer a7 v5 — device documentation (github.com)Device details — v5 — Source documentation (openwrt.org)
TP-LINK Archer A7 v5.x — TechInfoDepot (github.com)TP-LINK Archer A7 v5.x — WikiDevi (github.com)
tp-link archer a7 v5 — device documentation (github.com)TP-LINK Archer A7 v5.x — TechInfoDepot (github.com)TP-LINK Archer A7 v5.x — WikiDevi (github.com)Documented hardware — v5 — Source documentation (openwrt.org)
Saved scan
From our saved security research.
Prioritized by known exploitation, severity, then date.
Archer A7
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-9660.
Archer A7
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on UDP port 20002 by default. When parsing the slave_mac parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-9650.
Archer A7
This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7(US)_V5_210125 and Archer A7(US)_V5_200220 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IPv6 connections. The issue results from the lack of proper filtering of IPv6 SSH connections. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-12309.
Archer A7
This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IPv6 connections. The issue results from the lack of proper filtering of IPv6 SSH connections. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-9663.
Archer A7
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tmpServer service, which listens on TCP port 20002. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9662.