What is CVE-2025-15541?

CVE-2025-15541 is a medium-severity vulnerability in TP-Link Vx800v, classified under Improper Link Resolution Before File Access. CVSS score: 6.3/10. Published 2026-01-29.

How severe is CVE-2025-15541?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Vulnerability in TP-Link Vx800v

CVE-2025-15541

Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files, resulting in high confidentiality impact and limited integrity risk.

Published 2026-01-29 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N.

EPSS exploit prediction

EPSS: 0.003 (17.7th percentile), scored 2026-10-02.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 18th percentile — 17.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: +0.000

Affected products

TP-Link Vx800v — versions 1.0
TP-Link Vx800v Firmware
TP-Link Systems Inc. Vx800v V1.0 — versions 0

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2025-15541?: CVE-2025-15541 is a medium-severity vulnerability in TP-Link Vx800v, classified under Improper Link Resolution Before File Access. CVSS score: 6.3/10. Published 2026-01-29.
How severe is CVE-2025-15541?: Medium severity. CVSS v3 base score is 6.3 out of 10.