PT-2026-41547 · Tp Link · Tl-Wr720N

Published 2026-05-17 · Updated 2026-05-17 · CVE-2018-25321

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR720N (affected versions not specified)

Description A cross-site request forgery (CSRF) issue allows attackers to perform unauthorized administrative actions by tricking authenticated users into visiting malicious pages. This can lead to the modification of port forwarding rules through the 'VirtualServerRpm.htm' endpoint or changes to WiFi security settings via the 'WlanSecurityRpm.htm' endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2018-25321

Affected Products

Tl-Wr720N

References · 6

• 🔥 https://exploit-db.com/exploits/44335 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-25321 · Security Note
• https://t.me/cveNotify/163781 · Telegram Post
• https://static.tp-link.com/resources/software/TL-WR720N_V1_130719.zip · Note
• https://vulncheck.com/advisories/tp-link-tl-wr720n-all-versions-csrf-via-administrative-interfaces · Note
• https://tp-link.com · Note