TP-Link patched high-severity Archer NX router flaws, including one that could let attackers upload rogue firmware without authentication.