CVE-2025-30238CWE-863broken-access-control

CVE-2025-30238

published August 11, 2026

CVSS
8.6
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

In affected TP-Link Aginet devices, insufficient

authorization validation allows authenticated low-privileged users to execute higher-privileged

operations.

An attacker

may perform administrative actions such as creating privileged accounts or

modifying critical configuration settings.

The record
Technical detail
CVSS
8.6 · NONE
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.0th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-08-11T03:16Z
References (1)
EPSS history
Timeline
  • 10 AUG 22:24Z
    Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices
    cvelistv5