Vulnerability intelligence

CVE-2025-30238

TP-Link Systems Inc. HB810(US2) V1.0/1.6/2.0/2.6 CWE-863

In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may perform administrative actions such as creating privileged accounts or modifying critical configuration settings.

CVSS Score

8.6

High

EPSS — Exploit Probability

0.2%

Riskier than 8% of all CVEs · checked 2026-09-25

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories