CVE-2025-30241

creationtimestamp| type| source ---|---|--- 2026-08-11 00:25:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/it4zyfhddhbus 2026-10-15 08:49:40+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mxvokgn4fz26...

CVE-2025-30241 OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system...