CVE-2025-14737: TP-Link Tl-WA850RE Firmware

High severity, CVSS 8.0. EPSS: 0.9% chance of exploitation in the next 30 days.

Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

Affected products

• TP-Link Tl-WA850RE Firmware: up to and including 160527; up to and including 160922

Published 2025-12-18. Last modified 2026-06-17.