CVE-2025-15541: TP-Link VX800V Firmware

Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files, resulting in high confidentiality impact and limited integrity risk.

Affected products

• TP-Link VX800V Firmware: before 800.0.11 (fixed in 800.0.11)

Published 2026-01-29. Last modified 2026-06-17.