CVE-2026-0620 — L2TP over IPSec Encryption Failure on ArcherAXE75
When configured as L2TP/IPSec VPN server, Archer AXE75 V1 may accept connections using L2TP without IPSec protection, even when IPSec is enabled. This allows VPN sessions witho…
Published: 2026-02-03 · CVSS: 6.0 · CVSS 4.0
When configured as L2TP/IPSec VPN server, Archer AXE75 V1 may accept connections using L2TP without IPSec protection, even when IPSec is enabled. This allows VPN sessions without encryption, exposing data in transit and compromising confidentiality.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7