High severity · published Mar 23, 2026
CVE-2025-15517
A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated…
8.1
CVSS
3.1%
EPSS
No
On KEV
Description
A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker may perform privileged HTTP actions without authentication, including firmware upload and configuration operations.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Archer Nx200 Firmware · Tp-link
before 1.3.0; before 1.3.0; before 1.8.0 · source: NVD
AN
Archer Nx210 Firmware · Tp-link
before 1.3.0; before 1.3.0 · source: NVD
AN
Archer Nx500 Firmware · Tp-link
before 1.5.0; before 1.3.0 · source: NVD
AN
Archer Nx600 Firmware · Tp-link
before 1.3.0; before 1.3.0; before 1.4.0 · source: NVD
In the news
VulnerabilityHigh
Patch now: TP-Link Archer NX routers vulnerable to firmware takeover
TP-Link patched a high severity flaw (CVE-2025-15517) in Archer NX routers that could let attackers bypass authentication and install malicious firmware. TP-Link issued security updates for its Archer NX router series to fix multiple vulnerabilities, including CVE-2025-15517 (CVSS score of 8.6), a critical authentication bypass flaw. The vulnerability impacts multiple models, including NX200, NX210, NX500, […]
Mar 25, 2026·Security Affairs
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-15517
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-15517
Product
https://www.tp-link.com/en/support/download/archer-nx200/#Firmware
Product
https://www.tp-link.com/en/support/download/archer-nx210/#Firmware
Product
https://www.tp-link.com/en/support/download/archer-nx500/#Firmware
Product
https://www.tp-link.com/en/support/download/archer-nx600/#Firmware
Vendor Advisory
https://www.tp-link.com/us/support/faq/5027/
More from Archer Nx200 Firmware
7.3
CVE-2025-15605
A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data
7.2
CVE-2025-15519
Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an…
7.2
CVE-2025-15518
Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an…