QwikSec

Security Database

CVE

CWE

Training

CVE-2025-15035

Published: Jan 9, 2026

Modified: Jan 9, 2026

PUBLISHED

Description

Improper Input Validation vulnerability in TP-Link Archer AXE75 v1.6 (vpn modules) allows an authenticated adjacent attacker to delete arbitrary server file, leading to possible loss of critical system files and service interruption or degraded functionality.This issue affects Archer AXE75 v1.6: ≤ build 20250107.

Vendor	Product	Versions
TP-Link Systems Inc.	Archer AXE75 v1.6	affected `0 - <= build 20250107`

Weaknesses (CWE)

References

https://github.com/PaloAltoNetworks/u42-vulnerability-disclosures/tree/master/2025/PANW-2025-0004

https://www.tp-link.com/us/support/download/archer-axe75/v1/#Firmware

patch

https://www.tp-link.com/en/support/download/archer-axe75/v1/#Firmware

patch

https://www.tp-link.com/jp/support/download/archer-axe75/v1/#Firmware

patch

https://www.tp-link.com/phppage/preview.php?url=https://www.tp-link.com/en/support/faq/4881/

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.