01 RecordSTATE: PUBLISHED
02 Description
CNA: TPLinkPrivilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices
03 Exploitation and scoring
SRC: CISA, FIRST, NVD, RED HAT- Exploitation
- Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
- SSVC decision
- ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
- AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
- Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.
CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.- EPSS probability
- 0.19% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 9.5% of scored records. A rank, not a probability.
- NVD base score
- 8.6 (CVSS v4.0), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- NVD analysis status
- Awaiting Analysis. NVD last modified this record on 2026-10-09.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
SCHEMA: 5.2
- Published
- 2026-08-10 22:24Z2 MO AGO
- Last updated
- 2026-10-09 16:52Z20 DAYS AGO
- Reserved
- 2025-03-19
- Assigning CNA
- TPLink
- Record state
- PUBLISHED
- Severity
- High (CVSS 8.6)
- CNA CVSS vector
- CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- Weaknesses
- CWE-863Incorrect AuthorizationClass
- Data version
- 5.2
- Document digest
- 083f270dc830915cc389a75301dd82881ab3ba80f2c7a0b3d85938c64047adb8
05 Affected products
PAIRS: 59VendorProductVersionsPlatforms
TP-Link Systems Inc.HB810(EU1) V2.00 to < 0.10.0 3.2.2 v6095.0 Build 260306 Rel.47567n— TP-Link Systems Inc.HB710(EU1) 1.00 to < 0.3.0 3.0.0 v60be.0 Build 251128 Rel.43956n— TP-Link Systems Inc.HB610(EU1)0 to < 0.6.0 3.0.0 v60af.0 Build 251204 Rel.20362n— TP-Link Systems Inc.HB610(CA) V2.00 to < 0.6.0 3.0.0 v60af.0 Build 251216 Rel.46954n— TP-Link Systems Inc.HB410( EU1) 1.00 to < 0.3.0 3.0.0 v60bf.0 Build 250901 Rel.45574n— TP-Link Systems Inc.HB210(US2) 1.00 to < 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n— TP-Link Systems Inc.HB210(EU1) 1.00 to < 0.2.0 3.0.0 v60f9.0 Build 250826 Rel.47715n— TP-Link Systems Inc.HB210 Pro(EU1)1.00 to < 0.5.0 3.0.0 v60d5.0 Build 250922 Rel.13742n— TP-Link Systems Inc.HX510(US1) V2.00 to < 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n— TP-Link Systems Inc.HX510(EU1) V2.00 to < 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n— TP-Link Systems Inc.HX510(CA) V1.0/2.00 to < 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n— TP-Link Systems Inc.HX510(AU) V1.0/2.00 to < 0.14.0 3.0.0 v6065.0 Build 250822 Rel.81150n— TP-Link Systems Inc.HX510(US2) 2.60 to < 0.17.0 3.2.2 v6065.0 Build 260722 Rel.10662n— TP-Link Systems Inc.HX710(EU1) V1.00 to < 0.5.0 3.1.10 v6075.0 Build 260511 Rel.47847n— TP-Link Systems Inc.HX220(EU1) V1.00 to < 0.18.0 2.0.0 v605f.0 Build 260304 Rel.45905n— TP-Link Systems Inc.HX220(CA) V1.00 to < 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n— TP-Link Systems Inc.HX220(AU) V1.00 to < 0.21.0 2.0.0 v605f.0 Build 250306 Rel.9224n— TP-Link Systems Inc.HX141(EU1) V1.00 to < 1.2.0 3.1.0 v609d.0 Build 260128 Rel.29711n— TP-Link Systems Inc.HC220-G5(BR) V1.300 to < 0.17.0 2.0.0 v605e.0 Build 250618 Rel.19329n— TP-Link Systems Inc.EB810v(EU1) V1.00 to < 0.6.0 3.0.0 v608b.0 Build 250613 Rel.10497n— TP-Link Systems Inc.EX141(EU1) V1.00 to < 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n— TP-Link Systems Inc.EX141(US1) V1.00 to < 1.7.0 3.1.0 v608a.0 Build 250418 Rel.8257n— TP-Link Systems Inc.EX220(BR) V2.00 to < 0.19.0 2.0.0 v609b.0 Build 250814 Rel.49732n— TP-Link Systems Inc.EX220(RU) V1.00 to < 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n— TP-Link Systems Inc.EX220(US1) V1.00 to < 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n— TP-Link Systems Inc.EX222(EU1) V1.00 to < 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n— TP-Link Systems Inc.EX222(KR) V1.00 to < 0.20.0 2.0.0 v609b.0 Build 260427 Rel.16915— TP-Link Systems Inc.EX222(US1) V1.00 to < 0.20.0 2.0.0 v605f.0 Build 250305 Rel.14728n— TP-Link Systems Inc.EX511(EU1) V2.00 to < 0.9.0 3.0.0 v607e.0 Build 260520 Rel.33425n— TP-Link Systems Inc.EX511(US1) V2.00 to < 0.8.0 3.0.0 v607e.0 Build 260424 Rel.27419n— TP-Link Systems Inc.EX520(US1) V1.00 to < 0.7.0 3.0.0 v60b4.0 Build 251229 Rel.84306n— TP-Link Systems Inc.EX520v(EU1)1.00 to < 0.1.0 3.0.0 v60ee.0 Build 250310 Rel.55637n— TP-Link Systems Inc.EX521(US1) V1.00 to < 0.3.0 3.0.0 v60e3.0 Build 250925 Rel.66797n— TP-Link Systems Inc.EX820v(EU1) V1.00 to < 0.4.0 3.1.9 v6087.0 Build 250928 Rel.59674n— TP-Link Systems Inc.XX530v(BR)v1.00 to < 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n— TP-Link Systems Inc.XX530v(BR)v2.00 to < 0.4.0 3.1.10 v60dc.0 Build 250520 Rel.69748n— TP-Link Systems Inc.XX530v(US1)0 to < 0.6.0 3.0.0 v6096.0 Build 250416 Rel.26048n— TP-Link Systems Inc.XX530v(EU1)0 to < 0.3.0 3.1.10 v6107.0 Build 250425 Rel.71973n— TP-Link Systems Inc.XX230v(BR) V1.00 to < 0.16.0 3.0.0 v6066.0 Build 250423 Rel.43799n— TP-Link Systems Inc.VX1800v(EU1) V1.00 to < 0.14.0 2.0.0 v6092.0 Build 250417 Rel.24761n—