Vulnerabilities & PatchesEmerging1 src
Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges
TP-Link has disclosed multiple high-severity vulnerabilities affecting ISP-managed Aginet networking products, including mesh systems, routers, PON devices, and xDSL modems.
The flaws could allow attackers with network access to bypass authentication, escalate privileges, steal sensitive information, read device files, and execute operating system commands.
The security advisory, last updated on August 10, 2026, tracks the issues as CVE-2025-30237 through CVE-2025-30241. The affected products are commonly supplied, configured, and updated by internet service providers, meaning firmware availability may vary by operator and region.
The most serious flaw, CVE-2025-30237, is an authentication bypass vulnerability in the web management interface. It has a CVSS v4 score of 8. 7 and results from broken access control on certain endpoints.