CVE-2025-15551

MediumCVSS 5.6/10Last modified Jun 17, 2026

Description

The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.

Metrics

CVSS 3.1 5.6/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-95

Affected software

Vendor	Product	Versions
TP-Link Systems Inc.	Archer MR200 v5.2	< 1.2.0 Build 250917 Rel.51746
TP-Link Systems Inc.	Archer C20 v6	< 0.9.1 4.19 v0001.0 Build 250630 Rel.56583n
TP Link Systems Inc.	TL-WR850N v3	< 3.16.0 0.9.1 v6031.0 Build 251205 Rel.22089n
TP Link Systems Inc.	TL-WR845N v4	< 0.9.1 3.19 Build 251031 rel33710
TP-Link Systems Inc.	Archer C20 v5	< US_V5_260419; < EU_V5_260317

References

Timeline

Published: Feb 5, 2026
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-155527.8Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their CVE-2025-155537.1Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their CVE-2025-155547.8Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate thei CVE-2025-155558.2A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the fil CVE-2025-155567.5Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded up CVE-2025-155578.8An Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on the same network seg CVE-2025-155588.0Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-CVE-2025-155599.8An unauthenticated attacker can inject OS commands when calling a server API endpoint in NesterSoft WorkTime. The server API call to generat CVE-2025-15569.8A vulnerability, which was classified as problematic, has been found in westboy CicadasCMS 1.0. This issue affects some unknown processing o CVE-2025-155608.8An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL qu CVE-2025-155617.8An attacker can exploit the update behavior of the WorkTime monitoring daemon to elevate privileges on the local system to NT Authority\SYST CVE-2025-155626.1The server API endpoint /report/internet/urls reflects received data into the HTML response without applying proper encoding or filtering. T