← Zuruck zu CVEs

CVE-2026-0655

HIGH

8.0

Beschreibung

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TP-Link Deco BE25 v1.0 (web modules) allows authenticated adjacent attacker to read arbitrary files or cause denial of service. This issue affects Deco BE25 v1.0: through 1.1.1 Build 20250822.

CVE Details

CVSS v3.1 Bewertung8.0

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorADJACENT_NETWORK

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht3/2/2026

Zuletzt geandert3/6/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

tp-link:deco_be25tp-link:deco_be25_firmware

Schwachen (CWE)

CWE-22

Referenzen

https://www.tp-link.com/en/support/download/deco-be25/#Firmware(f23511db-6c3e-4e32-a477-6aa17d310630)

https://www.tp-link.com/sg/support/download/deco-be25/#Firmware(f23511db-6c3e-4e32-a477-6aa17d310630)

https://www.tp-link.com/us/support/download/deco-be25/v1/#Firmware(f23511db-6c3e-4e32-a477-6aa17d310630)

https://www.tp-link.com/us/support/faq/4993/(f23511db-6c3e-4e32-a477-6aa17d310630)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.