High severity7.3NVD Advisory· Published Jan 9, 2026· Updated Jun 17, 2026

CVE-2025-15035

Description

Improper Input Validation vulnerability in TP-Link Archer AXE75 v1.6 (vpn modules) allows an authenticated adjacent attacker to delete arbitrary server file, leading to possible loss of critical system files and service interruption or degraded functionality.This issue affects Archer AXE75 v1.6: ≤ build 20250107.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TP-Link/Archer AXE75 V1llm-fuzzy2 versions
<=build 20250107+ 1 more
- (no CPE)range: <=build 20250107
- (no CPE)range: 0
TP-Link/Archer Axe75 Firmware
cpe:2.3:o:tp-link:archer_axe75_firmware:*:*:*:*:*:*:*:*
Range: <=1.3.2

Patches

Vulnerability mechanics

References

github.com/PaloAltoNetworks/u42-vulnerability-disclosures/tree/master/2025/PANW-2025-0004nvdThird Party Advisory
www.tp-link.com/phppage/preview.phpnvdVendor Advisory
www.tp-link.com/en/support/download/archer-axe75/v1/nvdProduct
www.tp-link.com/jp/support/download/archer-axe75/v1/nvdProduct
www.tp-link.com/us/support/download/archer-axe75/v1/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000