Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 15:24:22 +0000 CVE-2025-9961 — Authenticated RCE by CWMP binary https://cve.radiocsirt.org/vuln/cve-2025-9961 <p><strong>Affected:</strong> TP-Link Systems Inc. AX10 V1/V1.2/V2/V2.6/V3/V3.6, TP-Link Systems Inc. AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6</p> <p>An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500.</p> <p>The exploit can only be conducted via a Man-In-The-Middle (MITM) attack.</p> <p>This issue affects AX10 V1/V1.2/V2/V2.6/V3/V3.6: before 1.2.1; AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6: before 1.3.11.</p> <p><strong>Affected:</strong> TP-Link Systems Inc. AX10 V1/V1.2/V2/V2.6/V3/V3.6, TP-Link Systems Inc. AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6</p> <p>An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500.</p> <p>The exploit can only be conducted via a Man-In-The-Middle (MITM) attack.</p> <p>This issue affects AX10 V1/V1.2/V2/V2.6/V3/V3.6: before 1.2.1; AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6: before 1.3.11.</p> https://cve.radiocsirt.org/vuln/cve-2025-9961