CVE-2025-14738: TP-Link Tl-WA850RE Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

Affected products

• TP-Link Tl-WA850RE Firmware: up to and including 160527; up to and including 160922

Published 2025-12-18. Last modified 2026-06-17.