Tl-wa850re Firmware vulnerabilities

3 known vulnerabilities in Tl-wa850re Firmware from TP-Link. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  WA850RE: Improper Authentication

  CVE-2025-14738Dec 18, 2025TP-Link

  Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

• 8.0 High severity

  WA850RE: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-14737Dec 18, 2025TP-Link

  Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

• 9.8 Critical severity

  Tl-wa850re Firmware: Use of Insufficiently Random Values

  CVE-2022-22922Feb 18, 2022TP-LinkEPSS 1.32%

  TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges.