TP-Link, Photoshop, OpenVPN, Norton VPN vulnerabilities

Summary: Cisco Talos disclosed eight vulnerabilities in the TP-Link Archer AX53 router (v1.0 1.3.1 Build 20241120), including a stack-based buffer overflow in tmpServer opcode 0x436 that can lead to arbitrary code execution and multiple OS command injection and arbitrary file reading flaws in the OpenVPN and dnsmasq configuration restore functions. Talos also disclosed one vulnerability each in Adobe Photoshop, OpenVPN 2.6.x and 2.8_git, and Norton VPN, and all were patched by their vendors except the Norton VPN flaw, which was discovered in use before a patch was available.
What you should know: The Norton VPN privilege escalation (CVE-2025-58074) was already being exploited before a fix existed, and the TP-Link router flaws let an attacker who can send packets or upload a file reach arbitrary code execution on a device sitting at the edge of the network.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-30814 CVE-2026-30815 CVE-2026-30816 CVE-2026-30817 CVE-2026-30818 CVE-2026-34632 CVE-2026-35058
Related: ⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026