Login Request a demo
High severity · published Mar 23, 2026
CVE-2025-15517
Authorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX600
8.1
CVSS
3.1%
EPSS
No
On KEV
Description
A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker may perform privileged HTTP actions without authentication, including firmware upload and configuration operations.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Archer NX200 v1.0 · TP-Link Systems Inc.
before 1.8.0 Build 260311 · source: vendor
AN
Archer NX200 v2.0 · TP-Link Systems Inc.
before 1.3.0 Build 260311 · source: vendor
AN
Archer NX200 v2.20 · TP-Link Systems Inc.
before 1.3.0 Build 260311 · source: vendor
AN
Archer NX200 v3.0 · TP-Link Systems Inc.
before < 1.3.0 Build 260309 · source: vendor
AN
Archer NX210 v2.0 v2.20 · TP-Link Systems Inc.
before 1.3.0 Build 260311 · source: vendor
AN
Archer NX210 v3.0 · TP-Link Systems Inc.
before 1.3.0 Build 260309 · source: vendor
AN
Archer NX500 v1.0 · TP-Link Systems Inc.
before 1.3.0 Build 260311 · source: vendor
AN
Archer NX500 v2.0 · TP-Link Systems Inc.
before < 1.5.0 Build 260309 · source: vendor
AN
Archer NX600 v1.0 · TP-Link Systems Inc.
before 1.4.0 Build 260311 · source: vendor
AN
Archer NX600 v2.0 · TP-Link Systems Inc.
before 1.3.0 Build 260311 · source: vendor
AN
Archer NX600 v3.0 · TP-Link Systems Inc.
before 1.3.0 Build 260309 · source: vendor
AN
Archer Nx200 Firmware · Tp-link
before 1.3.0; before 1.3.0; before 1.8.0 · source: NVD
In the news
VulnerabilityHigh
Patch now: TP-Link Archer NX routers vulnerable to firmware takeover
TP-Link patched a high severity flaw (CVE-2025-15517) in Archer NX routers that could let attackers bypass authentication and install malicious firmware. TP-Link issued security updates for its Archer NX router series to fix multiple vulnerabilities, including CVE-2025-15517 (CVSS score of 8.6), a critical authentication bypass flaw. The vulnerability impacts multiple models, including NX200, NX210, NX500, [&#8230;]
CVE-2025-15517
Mar 25, 2026·Security Affairs
Affected product
AN
Archer NX200 v1.0
TP-Link Systems Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-15517
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-15517
Product
https://www.tp-link.com/en/support/download/archer-nx200/#Firmware
Product
https://www.tp-link.com/en/support/download/archer-nx210/#Firmware
Product
https://www.tp-link.com/en/support/download/archer-nx500/#Firmware
Product
https://www.tp-link.com/en/support/download/archer-nx600/#Firmware
Vendor Advisory
https://www.tp-link.com/us/support/faq/5027/
More from Archer NX200 v1.0
7.3
CVE-2025-15605
Hardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600
7.2
CVE-2025-15519
Command Injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX600
7.2
CVE-2025-15518
Command Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX600