https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T04:53:35.445434+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292693 EUVD-2026-292693 2026-10-08T04:53:35.501413+00:00 EUVD-2026-292693 https://cve.radiocsirt.org/vuln/fkie_cve-2025-15551 fkie_cve-2025-15551 2026-10-08T04:53:35.501458+00:00

The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.

 https://cve.radiocsirt.org/vuln/ghsa-q6v4-fwc8-3mpc GHSA-q6v4-fwc8-3mpc 2026-10-08T04:53:35.501498+00:00

The response coming from TP-Link Archer MR200 v5.2, C20 v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.