CVE-2025-15628
Hardcoded Certificates in TP-Link Omada Device Communications
CVSS score
8.2
EPSS probability
%0.3
Risk score
0.0
Published
2 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More
The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional. Elsewhere, fake apps, helpful support calls, cheap banking kits, exposed systems, and weak defaults kept
Similar Vulnerabilities
9.8
CVE-2021-41653Code injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:3EPSS %76
9.8
CVE-2022-25061OS command injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:3EPSS %59
7.2
CVE-2025-9377 Actively exploitedOS command injection in Tp Link Tl Wr841n
WorkaroundEPSS %38
9.8
CVE-2022-25060OS command injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:2EPSS %40
9.8
CVE-2022-25064OS command injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:3EPSS %36
8.8
CVE-2022-30075Vulnerability in Tp Link Archer Ax50 Firmware
Patch status unknown Public Exploits:7EPSS %35
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-15628"