{"id":"CVE-2025-15541","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-15541","generatedAt":"2026-10-28T09:26:12.198Z","title":"Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files, resulting in high confidentiality impact and limited integrity risk.","description":"Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files, resulting in high confidentiality impact and limited integrity risk.","published":"2026-01-29T19:16:11.000Z","lastModified":"2026-06-17T08:37:59.000Z","status":"Analyzed","sourceIdentifier":"f23511db-6c3e-4e32-a477-6aa17d310630","cvss":{"version":"4.0","score":6.9,"severity":"MEDIUM","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-59"],"affected":["tp-link/vx800v firmware"],"epss":{"score":0.00268,"percentile":0.18828,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.tp-link.com/de/support/download/vx800v/#Firmware","tags":["Product"],"source":"f23511db-6c3e-4e32-a477-6aa17d310630"},{"url":"https://www.tp-link.com/us/support/faq/4930/","tags":["Vendor Advisory"],"source":"f23511db-6c3e-4e32-a477-6aa17d310630"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-15541","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}