Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 09:56:53 +0000 EUVD-2026-292693 https://cve.radiocsirt.org/vuln/euvd-2026-292693 EUVD-2026-292693 https://cve.radiocsirt.org/vuln/euvd-2026-292693 fkie_cve-2025-15551 https://cve.radiocsirt.org/vuln/fkie_cve-2025-15551 <p>The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router&#39;s admin web portal without the user&#39;s permission or knowledge.</p> <p>The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router&#39;s admin web portal without the user&#39;s permission or knowledge.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-15551 GHSA-q6v4-fwc8-3mpc https://cve.radiocsirt.org/vuln/ghsa-q6v4-fwc8-3mpc <p>The response coming from TP-Link Archer MR200 v5.2, C20 v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router&#39;s admin web portal without the user&#39;s permission or knowledge.</p> <p>The response coming from TP-Link Archer MR200 v5.2, C20 v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router&#39;s admin web portal without the user&#39;s permission or knowledge.</p> https://cve.radiocsirt.org/vuln/ghsa-q6v4-fwc8-3mpc