CVE-2026-0655

Medium CVSS: 6.9

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TP-Link Deco BE25 v1.0 (web modules) allows authenticated adjacent attacker to read arbitrary files or cause denial of service. This issue affects Deco BE25 v1.0: through 1.1.1 Build 20250822.

Vendor

Tp-link

Product

Deco Be25 Firmware

CWE

CWE-22

Yayın Tarihi

2026-03-02 18:16:26

Güncelleme

2026-03-06 19:46:46

Source Identifier

f23511db-6c3e-4e32-a477-6aa17d310630

KEV Date Added

Kategoriler

CWE-22 Deco Be25 Firmware MEDIUM Tp-link 2026

Referanslar

https://www.tp-link.com/en/support/download/deco-be25/#Firmware https://www.tp-link.com/sg/support/download/deco-be25/#Firmware https://www.tp-link.com/us/support/download/deco-be25/v1/#Firmware https://www.tp-link.com/us/support/faq/4993/

Benzer Kayıtlar

High

CVE-2026-34122

A stack-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within a configuration handling c…

High

CVE-2026-34124

A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic.…

High

CVE-2026-34118

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 in the HTTP POST body parsing logi…

High

CVE-2026-34119

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when…

High

CVE-2026-34120

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of…

High

CVE-2026-34121

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v…