PT-2026-5320 · Vx800V · Vx800V

Published 2026-01-29 · Updated 2026-03-09 · CVE-2025-15541

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions VX800v version 1.0

Description An issue with how links are handled in the VX800v SFTP service could allow an attacker who is already authenticated and has network access to use specially created symbolic links to gain access to system files. This could lead to a loss of confidential information.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2025-15541

Affected Products

Vx800V

References · 6

• https://osv.dev/vulnerability/CVE-2025-15541 · Vendor Advisory
• https://tp-link.com/de/support/download/vx800v/#Firmware · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-15541 · Security Note
• https://tp-link.com/us/support/faq/4930 · Vendor Advisory
• https://twitter.com/CVEnew/status/2016948638887317875 · Twitter Post
• https://t.me/cveNotify/154838 · Telegram Post