← Database

CVE-2025-14737

HIGH CVSS: 8.0 Published: 2025-12-18 Modified: 2026-06-17

Description

Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

Affected Platforms

Tp-Link Tl-Wa850ReTp-Link Tl-Wa850Re Firmware

Weakness Type

CWE-78

References