Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: TP-Link Systems Deco BE25 v1.0 — tp-link.com/us/support/faq/4993 Clear all filters
TI-2026-00449 CVE-2026-0654 · GHSA-46v4-6v76-3g4v

Command injection on TP-Link Deco BE25

Priority LOW 39

Improper input handling in the administration web interface on TP-Link Deco BE25 v1.0 allows crafted input to be executed as part of an OS command.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.00315 Published 2026-03-02 No fix listed CWE-78
TI-2026-00450 CVE-2026-0655 · GHSA-g3vf-pwqx-vc86

Path Traversal on TP-Link Deco BE25

Priority LOW 30

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TP-Link Deco BE25 v1.0 (web modules) allows authenticated adjacent attacker to read arbitrary files or cause denial of servi…

CVSS 4.0MEDIUM 6.9 Adjacent network High privileges No interaction EPSS 0.00308 Published 2026-03-02 No fix listed CWE-22