October 4, 2026
ITENESFRDE
CyberWorldOpsCyber Security · Threat Intelligence · CVE
Newsletter
Latest

CVE-2025-7851

Critical9.8Published on October 21, 2025

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness type (CWE)CWE-269
Vendorstp-link

Affected products

VendorsProductVersions
tp-linkfr307-m2 firmware< 1.2.5
tp-linkfr307-m2-
tp-linkfr205 firmware< 1.0.3
tp-linkfr205-
tp-linkfr365 firmware< 1.1.10
tp-linkfr365-
tp-linkg611 firmware< 1.2.2
tp-linkg611-
tp-linkg36 firmware< 1.1.4
tp-linkg36-
tp-linker7212pc firmware< 2.1.3
tp-linker7212pc-
tp-linker706w-4g firmware< 1.2.1
tp-linker706w-4g-
tp-linker706w firmware< 1.2.1
tp-linker706w-
tp-linker605 firmware< 2.3.1
tp-linker605-
tp-linker7206 firmware< 2.2.2
tp-linker7206-
tp-linker707-m2 firmware< 1.3.1
tp-linker707-m2-
tp-linker7412-m2 firmware< 1.1.0
tp-linker7412-m2-
tp-linker8411 firmware< 1.3.3

Related articles

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database