Threat actor
Volt Typhoon
Tracked by CyberSIXT since 31 Mar · last activity 8 Oct
CNMalpedia
- CVEs linked · all time
- 5
- in CISA KEV · all time
- 0
- articles · all time
- 6
One article in the last 45 daysThe latest: SecurityWeek, Thu 8 Oct, 11:00 UTC.See the full timeline
CVEs
5 CVEsCVE-2025-30237Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet DevicesCVSS8.7High–Not in KEV0.3%EPSS3articles
CVE-2025-30238Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet DevicesCVSS8.6High–Not in KEV0.2%EPSS3articles
CVE-2025-30241OS Command Injection in Web Interface in Multiple TP-Link Aginet DevicesCVSS8.6High–Not in KEV0.4%EPSS3articles
CVE-2025-30239Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet DevicesCVSS8.5High–Not in KEV0.2%EPSS3articles
CVE-2025-30240Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet DevicesCVSS5.1Medium–Not in KEV0.2%EPSS3articles
- Four US States Sue TP-Link Over Security Claims and Router FlawsSecurityWeek
- Iran, Russia, China Target Water Systems Using Weak PasswordsDark Reading
- US defence contractors warned of nation state edge device attacksInfosecurity
- China-Linked Actors Deploy Covert Botnets Using Routers and IoTDark Reading
- OT firms face quantum readiness attestations without proper toolsDark Reading
- The threat to critical infrastructure has changed. Has your readiness?Microsoft · first in our coverage