TP-Link Product Security Update Advisory
overview
TP-Link has released a security update to address vulnerabilities in its products. users of affected products are advised to update to the latest version.
affected Products
Cve-2025-15517, cve-2025-15518, cve-2025-15519
Archer NX600 v3.0 Version: 1.3.0 Build 260309 and earlier
Archer NX600 v2.0 Versions: 1.3.0 Build 260311 and earlier
Archer NX600 v1.0 Version: Less than 1.3.0 Build 260311
Archer NX500 v2.0 Version: 1.5.0 Build 260309 and earlier
Archer NX500 v2.0 Version: 1.3.0 Build 260311 and earlier
Archer NX210 v3.0 Version: 1.3.0 Build 260309 and earlier
Archer NX210 v2.0 Version: 1.3.0 Build 260311 and earlier
Archer NX210 v2.20 Version: 1.3.0 Build 260311 and earlier
Archer NX200 v3.0 Version: 1.3.0 Build 260309 and earlier
Archer NX200 v2.20 Version: 1.3.0 Build 260311 and earlier
Archer NX200 v2.0 Version: Less than 1.3.0 Build 260311
Archer NX200 v1.0 Version: 1.8.0 Build 260311 and earlier
resolved Vulnerabilities
Authentication bypass vulnerability in the HTTP server endpoint (CVE-2025-15517)
command injection vulnerability in the radio control CLI path (CVE-2026-15518)
command injection vulnerability in the modem management CLI path (CVE-2026-15519)
vulnerability patches
Vulnerability patches have been made available in the latest update. please follow the instructions on the reference site to update to the latest version of the vulnerability patch.
Cve-2025-15517, cve-2025-15518, cve-2025-15519
Archer NX600 v3.0 Version: 1.3.0 Build 260309 or later
Archer NX600 v2.0 Version: 1.3.0 Build 260311 and later
Archer NX600 v1.0 Version: 1.3.0 Build 260311 and later
Archer NX500 v2.0 Version: 1.5.0 Build 260309 or later
Archer NX500 v2.0 version: 1.3.0 Build 260311 or later
Archer NX210 v3.0 Version: 1.3.0 Build 260309 or later
Archer NX210 v2.0 version: 1.3.0 Build 260311 or later
Archer NX210 v2.20 Version: 1.3.0 Build 260311 or later
Archer NX200 v3.0 Version: 1.3.0 Build 260309 or later
Archer NX200 v2.20 Version: 1.3.0 Build 260311 or later
Archer NX200 v2.0 Version: 1.3.0 Build 260311 or later
Archer NX200 v1.0 Version: 1.8.0 Build 260311 or later
references
[1] Security Advisory on Multiple Vulnerabilities on TP-Link Archer NX200, NX210, NX500 and NX600 (CVE-2025-15517 to CVE-2025-15519 and CVE-2025-15605)
https://www.tp-link.com/us/support/faq/5027/