CVE-2025-15551 - LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N

CVE ID : CVE-2025-15551 Published : Feb. 5, 2026, 5:22 p.m. | 50 minutes ago Description : The response coming from TP-Link Archer MR200 v5.2, C20 v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge. Severity: 5.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...