CVE-2025-15541

6.9 mediumEPSS 0.3%

Medium (6.9) in tp-link vx800v firmware. EPSS 0.3% chance of exploitation in the next 30 days.

Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files, resulting in high confidentiality impact and limited integrity risk.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

6.3 medium

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2026-01-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tp-link:vx800v_firmware

References

https://www.tp-link.com/de/support/download/vx800v/#Firmware
https://www.tp-link.com/us/support/faq/4930/

Check your stack JSON