https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T12:05:23.360264+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2024-05529 bdu:2024-05529 2026-10-07T12:05:23.364965+00:00 bdu:2024-05529 https://vulnerability.circl.lu/vuln/fkie_cve-2024-38471 fkie_cve-2024-38471 2026-10-07T12:05:23.365061+00:00

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.

 https://vulnerability.circl.lu/vuln/ghsa-37mw-xfjf-m6pf GHSA-37mw-xfjf-m6pf 2026-10-07T12:05:23.365128+00:00

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.

 https://vulnerability.circl.lu/vuln/jvndb-2024-003831 jvndb-2024-003831 2026-10-07T12:05:23.365158+00:00

Multiple products provided by TP-LINK contains an OS command injection vulnerability (CWE-78) related to the backup/restore function. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.