CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.0. It may lead to a denial-of-service condition.
CVE
CVE-2026-0655
Severity
HIGH
CVSS
8
EPSS
0.27%
Original NVD Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TP-Link Deco BE25 v1.0 (web modules) allows authenticated adjacent attacker to read arbitrary files or cause denial of service. This issue affects Deco BE25 v1.0: through 1.1.1 Build 20250822.
Related CVEs
Other vulnerabilities affecting the same vendor(s)