Medium 5.9Published Feb 5, 2026

CVE-2025-15551LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N

Updated under an hour ago (Oct 28, 2026, 6:00 AM ET)

Does this affect you?

It affects TP-Link Systems Inc. Archer MR200 v5.2 and 8 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for TP-Link Systems Inc. Archer MR200 v5.2

Exploited in the last 30 days

The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.

CVSS: 5.9 MEDIUM (v4.0, CNA)CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
Weakness (CWE): CWE-95
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: TPLink
NVD analysis: Modified
Record last updated: Apr 22, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

TP-Link Systems Inc. Archer MR200 v5.2 tp_link_systems:archer_mr200_v5.2 (from the name)	before 1.2.0 Build 250917 Rel.51746	CNA record
TP-Link Systems Inc. Archer C20 v6 tp_link_systems:archer_c20_v6 (from the name)	before 0.9.1 4.19 v0001.0 Build 250630 Rel.56583n	CNA record
TP Link Systems Inc. TL-WR850N v3 tp_link_systems:tl_wr850n_v3 (from the name)	before 3.16.0 0.9.1 v6031.0 Build 251205 Rel.22089n	CNA record
TP Link Systems Inc. TL-WR845N v4 tp_link_systems:tl_wr845n_v4 (from the name)	before 0.9.1 3.19 Build 251031 rel33710	CNA record
TP-Link Systems Inc. Archer C20 v5 tp_link_systems:archer_c20_v5 (from the name)	before US_V5_260419; before EU_V5_260317	CNA record
tp-link archer_mr200_firmware tp-link:archer_mr200_firmware	before 250917	NVD
tp-link archer_c20_firmware tp-link:archer_c20_firmware	before 250630	NVD
tp-link tl-wr850n_firmware tp-link:tl-wr850n_firmware	before 0.9.1_Build251205	NVD
tp-link tl-wr845n_firmware tp-link:tl-wr845n_firmware	before 251031	NVD

References

References

https://www.tp-link.com/en/support/download/archer-mr200/v5.20/#Firmware	patch, product
https://www.tp-link.com/en/support/download/archer-c20/v6/#Firmware	patch, product
https://www.tp-link.com/in/support/download/tl-wr850n/#Firmware	patch, product
https://www.tp-link.com/en/support/download/tl-wr845n/#Firmware	patch, product
https://www.tp-link.com/in/support/download/archer-mr200/v5.20/#Firmware	patch, product
https://www.tp-link.com/in/support/download/archer-c20/v6/#Firmware	patch, product
https://www.tp-link.com/in/support/download/tl-wr845n/#Firmware	patch, product
https://www.tp-link.com/us/support/faq/4948/	vendor-advisory
https://www.tp-link.com/us/support/download/archer-c20/v5/#Firmware	patch
https://www.tp-link.com/en/support/download/archer-c20/v5/#Firmware	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.