CVE-2025-7851

—

CVSS 4.0

8.7 high

EPSS

<1%p49

Published

Oct 21, 2025 (Oct 21, 2025)

Modified

Jun 17, 2026

Description

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.

Vendors: tp-link
Products: fr307-m2 firmware, fr205 firmware, fr365 firmware, g611 firmware, g36 firmware, er7212pc firmware, er706w-4g firmware, er706w firmware, er605 firmware, er7206 firmware, er707-m2 firmware, er7412-m2 firmware
Weakness: CWE-269
Vector: CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

In the news3 stories