CVE-2025-15551CWE-95

LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N

Medium · published February 5, 2026

CVSS v4.0
5.9
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.

The record
Technical detail
CVSS v4.0
5.9 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00445 · 37.7th percentile
Weakness
CWE-95 · Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Published
2026-02-05T17:22Z
EPSS history
Timeline
  • 05 FEB 17:22Z
    LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N
    cvelistv5