PT-2026-69991
CVE-2025-30237
·
Published
2026-08-10
·
Updated
2026-10-09
Description by
CVSS 4.0
8.7
HighMetricsAV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
TP-Link Aginet (affected versions not specified)
Description
TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints. This issue results from improper enforcement of access control mechanisms on sensitive operations, allowing an unauthenticated attacker to send specially crafted requests to bypass authentication and directly invoke privileged functionality. Successful exploitation may enable an attacker to execute privileged operations and gain full control of the device.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾