CVE-2025-30239CWE-321

CVE-2025-30239

published August 11, 2026

CVSS
8.5
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

In affected TP-Link Aginet devices, use of

hardcoded cryptographic keys embedded in the firmware to protect sensitive

configuration data may allow an attacker who has access to device storage to

recover the keys and decrypt stored data.

Successful

exploitation may allow access to decrypted sensitive configuration data,

including credentials and service-related information.

The record
Technical detail
CVSS
8.5 · NONE
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.1th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2026-08-11T03:16Z
References (1)
EPSS history
Timeline
  • 10 AUG 22:25Z
    Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices
    cvelistv5