CVE-2023-28760 | TP-Link AX1800 upnpsoap.c db_dir stack-based overflow

October 2, 2025 Yanac

A vulnerability has been found in TP-Link AX1800 and classified as critical. This affects an unknown part of the file minidlna-1.1.2/upnpsoap.c. The manipulation of the argument db_dir leads to stack-based buffer overflow.

This vulnerability is referenced as CVE-2023-28760. The attack needs to be initiated within the local network. No exploit is available.VulDB Recent EntriesRead More