Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When such a crafted file is restored, the injected tag is interpreted by a shell, allowing execution of arbitrary commands with root privileges. Successful exploitation allows the attacker to gain root-level command execution, compromising confidentiality, integrity and availability.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-01-29 | 2 | Disclosure1General1 |
| 2026-03-09 | 1 | Disclosure1 |
🔴 TP-Link Archer RE605X, #OS Command Injection, #CVE-2025-15545 (High) https://dailycve.com/tp-link-archer-re605x-os-command-injection-cve-2025-15545-high/
Post summary
A new OS Command Injection vulnerability (CVE-2025-15545) with a High CVSS score has been disclosed for the TP‑Link Archer RE605X router; no PoC, exploit, or patch details are mentioned.
CVE-2025-15545 Backup Restore Vulnerability Enables Unauthenticated Root Command Injection https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15545
Post summary
CVE-2025-15545 is disclosed as a backup‑restore flaw that allows unauthenticated root command injection, but the snippet provides no PoC, exploit code, or patch information.
CVE-2025-15545 The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When such a crafted file is restored, the injected tag … https://www.cve.org/CVERecord?id=CVE-2025-15545
Post summary
The post briefly notes a validation flaw in the backup restore function for CVE-2025-15545, without indicating any PoC, exploit, active use, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | archer_re605x | 3.0 | - | - |
| OS | tp-link | archer_re605x_firmware | - | - | - |