Vulnerability in Tp-Link Aginet
CVE-2025-9293
A vulnerability in the certificate validation logic may allow applications to accept untrusted or improperly validated server identities during TLS communication. An attacker in a privileged network position may be able to intercept or modify traffic if they can position themselves within the communication channel. Successful exploitation may compromise confidentiality, integrity, and availability of application data.
Vulnerability class: Improper Certificate Validation
EPSS: 0.002 (13.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory, Vendor Advisory)
- f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-9293?
- CVE-2025-9293 is a high-severity vulnerability in Tp-Link Aginet, classified under Improper Certificate Validation. CVSS score: 8.1/10. Published 2026-02-13.
- How severe is CVE-2025-9293?
- High severity. CVSS v3 base score is 8.1 out of 10.