@Nethir 

I don't know what to tell you exactly about the vulnerabilities for that particular router. What I can tell you is this: I have an Archer AX-23 that i purchased in 2024. I had some strange things that happened through my Chromebook that let me to try and secure my Google account. Now other than the fact that the password on my Chromebook was changed ( i live alone and no one was here ATT) and i after making sure that other things associated with my Google account we're not compromised, I thought okay. But something was bugging me. I find I'm constantly logged out of the TP Link app which is bound or should be with this device. The connection between those two goes a little further: I also did some digging but before I did, I have my router at times do very strange things like two of the LED lights let's see solid on the front of the router will go black and and I have no connection to the Wi-Fi. I can try resetting the router resetting my modem and I still cant connect to Wi-Fi. But if I plug in my ethernet into the router then into my dock, I have no issues and while I think many times this has something to do with my ISP, even stranger is that when I lose my Wi-Fi I'm standing in front of the router turn to look away within less than 20 seconds I look back ,lights are solid again. This is happened to me at least four times. I'm sure that this is happened to me when I've been at work and it's solved itself without me looking at the router but it just seems odd that everything I could try possibly to get the Wi-Fi to work again, happend as soon as i looked away and back. I'm going a little long in this so I'll finish it up my thoughts are that my router has been taken over and is being used as a part of a botnet. Like you when I did a search with some keywords I found that there was an article published about a duo at the pound conference it was held in Toronto Ontario Canada last year had said that they were able to easily exploit weaknesses on the model previous to the one that I purchased and the previous router model was most likely to be accessed via TCP UDP ports for online gaming usually through Valve's Steam and as such was seen being used as part of a botnet. Dumbfounded! I own a Steam Deck and the purchase of the router was to replace the older ASUS router I previously was using. Then about 1 to 2 weeks ago I read an article online about how the United States doj was recently hit with the hardest cyber surveillance attack ever seen and because of this Donald Trump and the new appointed head of the doj and I'm sure Secretary of defense are to decide on whether they are going to ban tp-link as well as in general band any router modem Internet of things that is made in China. 65% of the routers, modems IOT, etc. they're used by the doj are TP-Link. 

I'm not going to point fingers or imply this company products and services are bad, I'm going to remain impartial and it's not out of fear, or any other emotion.

I'm sorry that this was very long for you to read but I felt that I should at least tell you my story and the information I have came up with. I should be able to easily find the links for those two articles should you wish to see them.

Again, I'm only sharing with you and anybody else that reads this thread, my belief, my experiences and some proof in-the-pudding evidence. NOTE: I did a double take on the article link I had mentioned about vulnerabilities found on the the previous tp-link Archer router model that was  documented in from 2023 at the PWND convention, To, ON, CA and it is not a fake news site nor have my internet browsers been hi jacked as i looked at the article on multiple devices.

I hope this helps with any decision/s you make in the future with your router.

Broken Aero