CVE-2025-14737

creationtimestamp| type| source ---|---|--- 2025-12-18 18:20:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741950789308220 2025-12-18 20:12:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabyeexky32g...

CVE-2025-14737

CVE-2025-14737 concerns a command-injection vulnerability in TP-Link WA850RE (httpd modules) that allows an authenticated adjacent attacker to inject arbitrary commands. Affected devices include WA850RE V2_160527 and WA850RE V3_160922 (and earlier), with exploitation described as possible (PoC) p...