CVE record · CVE-2025-30241

OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices

CVSS 8.6 HighEPSS 0.0041 · 35th percentile

Published by the CVE Program (CNA: TPLink) at 10 Aug 2026, 22:26 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
TP-Link Systems Inc.	HB810(US2) V1.0/1.6/2.0/2.6	affected before 0.9.0 3.2.2 v6095.0 Build 260717 Rel.67188n custom Other versions: unaffected
TP-Link Systems Inc.	HB810(EU1) V2.0	affected before 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n custom Other versions: unaffected
TP-Link Systems Inc.	HB710(US2) V1.6/1.0	affected before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n custom Other versions: unaffected
TP-Link Systems Inc.	HB710(EU1) 1.0	affected before 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n custom Other versions: unaffected
TP-Link Systems Inc.	HB610(US2) V2.6/2.0	affected before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n custom Other versions: unaffected
TP-Link Systems Inc.	HB610(EU1)	affected before 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n custom Other versions: unaffected
TP-Link Systems Inc.	HB610(CA) V2.0	affected before 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n custom Other versions: unaffected
TP-Link Systems Inc.	HB410( EU1) 1.0	affected before 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n custom Other versions: unaffected
TP-Link Systems Inc.	HB210(US2) 1.0	affected before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n custom Other versions: unaffected
TP-Link Systems Inc.	HB210(EU1) 1.0	affected before 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n custom Other versions: unaffected
TP-Link Systems Inc.	HB210 Pro(EU1)1.0	affected before 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n custom Other versions: unaffected
TP-Link Systems Inc.	HB210 Pro(US2)1.0/1.6	affected before 0.8.0 3.0.0 v60d5.0 Build 260318 Rel.78363n custom Other versions: unaffected
TP-Link Systems Inc.	EB210 Pro(EU1) 1.0	affected before 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n custom Other versions: unaffected
TP-Link Systems Inc.	EB210 Pro(US1) 1.0	affected before 0.2.0 3.0.0 v60f4.0 Build 250807 Rel.58901n custom Other versions: unaffected
TP-Link Systems Inc.	EB810v(EU1) V1.0	affected before 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n custom Other versions: unaffected
TP-Link Systems Inc.	EX220(BR) V1.0/1.20/1.28/1.29/1.8	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX220(BR) V2.0	affected before 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n custom Other versions: unaffected
TP-Link Systems Inc.	EX220(EU1) V1.0/1.20	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX220(RU) V1.0	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX220(US1) V1.0	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX222(EU1) V1.0	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX222(KR) V1.0	affected before 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915 custom Other versions: unaffected
TP-Link Systems Inc.	EX222(US1) V1.0	affected before 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n custom Other versions: unaffected
TP-Link Systems Inc.	EX520v(EU1)1.0	affected before 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n custom Other versions: unaffected
TP-Link Systems Inc.	EX820v(EU1) V1.0	affected before 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n custom Other versions: unaffected
TP-Link Systems Inc.	EX920(US2) V1.6/V1.0	affected before 0.8.0 3.2.2 v6080.0 Build 260309 Rel.54790n custom Other versions: unaffected
TP-Link Systems Inc.	XX530v(BR)v2.0	affected before 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n custom Other versions: unaffected
TP-Link Systems Inc.	XX530v(EU1)	affected before 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n custom Other versions: unaffected
TP-Link Systems Inc.	XX230v(BR) V1.0	affected before 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n custom Other versions: unaffected
TP-Link Systems Inc.	VX800v(DE) V1.0	affected before 800.0.16 custom Other versions: unaffected
TP-Link Systems Inc.	VX420-G2h(AU) V3.0	affected before 0.2.0 2.0.0 v60df.0 Build 250427 Rel.38233n custom Other versions: unaffected

Identifiers: CVE-2025-30241
CNA: TPLink
Weakness (CWE): CWE-78
Tags: TP-Link Systems Inc. HB810(US2) V1.0/1.6/2.0/2.6
TP-Link Systems Inc. HB810(EU1) V2.0
TP-Link Systems Inc. HB710(US2) V1.6/1.0
TP-Link Systems Inc. HB710(EU1) 1.0
TP-Link Systems Inc. HB610(US2) V2.6/2.0
TP-Link Systems Inc. HB610(EU1)
TP-Link Systems Inc. HB610(CA) V2.0
TP-Link Systems Inc. HB410( EU1) 1.0
Command injection
Published: 10 Aug 2026
Updated: 12 Aug 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
8.6	High	4.0	CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	CNA (TPLink)

CISA KEV Not listed.
EPSS 0.0041, the 35th percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 10 Aug 2026. New records show when each source confirmed them.

Sources

References from the CNA

www.tp-link.com/us/support/faq/5239/ vendor-advisory

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.