PT-2026-5314 · Unknown · Backuprestore

Nicola Giuffrida · Published 2026-01-29 · Updated 2026-03-09 · CVE-2025-15545

Positive Technologies (AI Summary)

CVSS v4.0

7.3

High

Base vector

AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions versions prior to 2.3

Description The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When a crafted file is restored, the injected tag is interpreted by a shell, allowing execution of arbitrary commands with root privileges. Successful exploitation allows an attacker to gain root-level command execution, compromising confidentiality, integrity, and availability. The vulnerability allows for the execution of arbitrary commands via the /api/v1/restore endpoint using a crafted backup file containing malicious tags. The vulnerable parameter is the backup file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-15545

Affected Products

Backuprestore

References · 11

• 🔥 https://nico-security.com/posts/cve-2025-15545 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-15545 · Security Note
• https://tp-link.com/en/support/download/re605x/v3/#Firmware · Patch
• https://tp-link.com/us/support/download/re605x/v3/#Firmware · Patch
• https://osv.dev/vulnerability/CVE-2025-15545 · Vendor Advisory
• https://tp-link.com/us/support/faq/4929 · Vendor Advisory
• https://twitter.com/CVEnew/status/2016934793640906940 · Twitter Post
• https://twitter.com/dailycve/status/2031114628877451633 · Twitter Post
• https://t.me/cveNotify/154822 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2016970651974660417 · Twitter Post
• https://t.me/cveNotify/150483 · Telegram Post