CVE-2026-0620

The CVE-2026-0620 entry concerns the TP-Link Archer AXE75 V1 when configured as an L2TP/IPSec VPN server. Affected component: L2TP/IPSec VPN server handling; root cause: L2TP connections may be accepted without IPSec protection even if IPSec is enabled, leading to unencrypted VPN sessions and exp...

CVE-2025-24292

A misconfigured query in UniFi Network v9.1.120 and earlier could allow users to authenticate to Enterprise WiFi or VPN Server l2tp and OpenVPN using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile...

Cisco Small Business 授权问题漏洞

Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in the Cisco Small Business RV110W, RV130, RV130W, and RV215W routers, which stems from a vulnerability in the authentication feature of the IPSec VPN server, which can be exploited by an attacker to bypass the...