CVE record · CVE-2025-30237

Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet Devices

CVSS 8.7 HighEPSS 0.0033 · 26th percentile

Published by the CVE Program (CNA: TPLink) at 10 Aug 2026, 22:23 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
TP-Link Systems Inc.	HB810(US2) V1.0/1.6/2.0/2.6	affected before 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n custom Other versions: unaffected
TP-Link Systems Inc.	HB810(EU1) V2.0	affected before 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n custom Other versions: unaffected
TP-Link Systems Inc.	HB710(US2) V1.6/1.0	affected before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n custom Other versions: unaffected
TP-Link Systems Inc.	HB710(EU1) 1.0	affected before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n custom Other versions: unaffected
TP-Link Systems Inc.	HB610(US2) V2.6/2.0	affected before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n custom Other versions: unaffected
TP-Link Systems Inc.	HB610(EU1)	affected before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n custom Other versions: unaffected
TP-Link Systems Inc.	HB610(CA) V2.0	affected before 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n custom Other versions: unaffected
TP-Link Systems Inc.	HB410( EU1) 1.0	affected before 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n custom Other versions: unaffected
TP-Link Systems Inc.	HB210(US2) 1.0	affected before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n custom Other versions: unaffected
TP-Link Systems Inc.	HB210(EU1) 1.0	affected before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n custom Other versions: unaffected
TP-Link Systems Inc.	HB210 Pro(EU1)1.0	affected before 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n custom Other versions: unaffected
TP-Link Systems Inc.	HB210 Pro(US2)1.0/1.6	affected before 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n custom Other versions: unaffected
TP-Link Systems Inc.	HX510(US1) V2.0	affected before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n custom Other versions: unaffected
TP-Link Systems Inc.	HX510(EU1) V2.0	affected before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n custom Other versions: unaffected
TP-Link Systems Inc.	HX510(CA) V1.0/2.0	affected before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n custom Other versions: unaffected
TP-Link Systems Inc.	HX510(AU) V1.0/2.0	affected before 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n custom Other versions: unaffected
TP-Link Systems Inc.	HX510(US2) 2.6	affected before 0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n custom Other versions: unaffected
TP-Link Systems Inc.	HX710(EU1) V1.0	affected before 0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n custom Other versions: unaffected
TP-Link Systems Inc.	HX710 Pro(EU1) V1.0	affected before 0.4.0 3.1.10 v6082.0 Build 260204 Rel.49460n custom Other versions: unaffected
TP-Link Systems Inc.	HX220(US1) V1.0/1.6	affected before 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n custom Other versions: unaffected
TP-Link Systems Inc.	HX220(EU1) V1.0	affected before 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n custom Other versions: unaffected
TP-Link Systems Inc.	HX220(CA) V1.0	affected before 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n custom Other versions: unaffected
TP-Link Systems Inc.	HX220(AU) V1.0	affected before 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n custom Other versions: unaffected
TP-Link Systems Inc.	HX141(EU1) V1.0	affected before 1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n custom Other versions: unaffected
TP-Link Systems Inc.	HC220-G5(US1) V1.0/1.6	affected before 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n custom Other versions: unaffected
TP-Link Systems Inc.	HC220-G5(EU1) V1.20/1.0	affected before 0.18.0 2.0.0 v605e.0 Build 250827 Rel.37904n custom Other versions: unaffected
TP-Link Systems Inc.	HC220-G5(BR) V1.30	affected before 0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n custom Other versions: unaffected
TP-Link Systems Inc.	EX141(BR) V1.0/1.9	affected before 1.8.0 3.1.0 v608a.0 Build 250425 Rel.40905n custom Other versions: unaffected
TP-Link Systems Inc.	EX141(EU1) V1.0	affected before 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n custom Other versions: unaffected
TP-Link Systems Inc.	EX141(US1) V1.0	affected before 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n custom Other versions: unaffected
TP-Link Systems Inc.	EX220(BR) V1.0/1.20/1.28/1.29/1.8	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX220(BR) V2.0	affected before 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n custom Other versions: unaffected
TP-Link Systems Inc.	EX220(EU1) V1.0/1.20	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX220(RU) V1.0	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX220(US1) V1.0	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX222(EU1) V1.0	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX222(KR) V1.0	affected before 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 custom Other versions: unaffected
TP-Link Systems Inc.	EX222(US1) V1.0	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX511(BR) V2.0/2.8/2.9	affected before 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n custom Other versions: unaffected
TP-Link Systems Inc.	EX511(EU1) V2.0	affected before 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n custom Other versions: unaffected

And 16 more products. The full list is on the CVE record.

Identifiers: CVE-2025-30237
CNA: TPLink
Weakness (CWE): CWE-862
Tags: TP-Link Systems Inc. HB810(US2) V1.0/1.6/2.0/2.6
TP-Link Systems Inc. HB810(EU1) V2.0
TP-Link Systems Inc. HB710(US2) V1.6/1.0
TP-Link Systems Inc. HB710(EU1) 1.0
TP-Link Systems Inc. HB610(US2) V2.6/2.0
TP-Link Systems Inc. HB610(EU1)
TP-Link Systems Inc. HB610(CA) V2.0
TP-Link Systems Inc. HB410( EU1) 1.0
Broken access control
Published: 10 Aug 2026
Updated: 9 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
8.7	High	4.0	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	CNA (TPLink)

CISA KEV Not listed.
EPSS 0.0033, the 26th percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 10 Aug 2026. New records show when each source confirmed them.

Sources

References from the CNA

www.tp-link.com/us/support/faq/5239/ vendor-advisory

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.