CVE-2025-15548: Missing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800v

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-01-29 · updated 2026-06-17
Weakness: CWE-311

Description

Some VX800v v1.0 web interface endpoints transmit sensitive information over unencrypted HTTP due to missing application layer encryption, allowing a network adjacent attacker to intercept this traffic and compromise its confidentiality.

Affected products

TP-Link Systems Inc. VX800v v1.0: before 800.0.18 — fixed in 800.0.18

How to fix

Upgrade to a fixed version: TP-Link Systems Inc. VX800v v1.0 800.0.18. Check the vendor advisory for mitigations.

References

https://www.tp-link.com/de/support/download/vx800v/#Firmware
https://www.tp-link.com/us/support/faq/4930/

Get alerted when CVE-2025-15548 or the next vulnerability affects your stack