Security advisories on Cyshield Seclabhttps://seclab.cyshield.com/advisories/Recent content in Security advisories on Cyshield SeclabHugo -- gohugo.ioen© 2026 Cyshield.Tue, 09 Jun 2026 00:00:00 +0000Multiple TP-Link Routers: Authorization Bypass in HTTP Serverhttps://seclab.cyshield.com/advisories/cve-2025-15517/Mon, 23 Mar 2026 00:00:00 +0000https://seclab.cyshield.com/advisories/cve-2025-15517/A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker may perform privileged HTTP actions without authentication, including firmware upload and configuration operations.Multiple TP-Link Routers: Hardcoded Configuration Encryption Keyhttps://seclab.cyshield.com/advisories/cve-2025-15605/Mon, 23 Mar 2026 00:00:00 +0000https://seclab.cyshield.com/advisories/cve-2025-15605/A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.Multiple TP-Link Routers: Post Authentication Command Injection in CLI controlBF Handlerhttps://seclab.cyshield.com/advisories/cve-2025-15518/Mon, 23 Mar 2026 00:00:00 +0000https://seclab.cyshield.com/advisories/cve-2025-15518/Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.Multiple TP-Link Routers: Post Authentication Command Injection in CLI sendAtCmd Handlerhttps://seclab.cyshield.com/advisories/cve-2025-15519/Mon, 23 Mar 2026 00:00:00 +0000https://seclab.cyshield.com/advisories/cve-2025-15519/Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.