WA850RE vulnerabilities

2 known vulnerabilities in WA850RE from TP-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  WA850RE: Improper Authentication

  CVE-2025-14738Dec 18, 2025TP-Link

  Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

• 8.0 High severity

  WA850RE: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-14737Dec 18, 2025TP-Link

  Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.