What is CVE-2025-15541?

CVE-2025-15541 is a medium-severity vulnerability in Tp-Link Vx800v, classified under Improper Link Resolution Before File Access. CVSS score: 6.3/10. Published 2026-01-29.

How severe is CVE-2025-15541?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Vulnerability in Tp-Link Vx800v

CVE-2025-15541

Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files, resulting in high confidentiality impact and limited integrity risk.

EPSS: 0.003 (16.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N.

Affected products

Tp-link Vx800v — versions 1.0
Tp-link Vx800v_firmware
Tp-link Systems Inc. Vx800v V1.0 — versions 0

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

References

f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2025-15541?: CVE-2025-15541 is a medium-severity vulnerability in Tp-Link Vx800v, classified under Improper Link Resolution Before File Access. CVSS score: 6.3/10. Published 2026-01-29.
How severe is CVE-2025-15541?: Medium severity. CVSS v3 base score is 6.3 out of 10.