Multiple High-Severity Vulnerabilities Disclosed in TP-Link Aginet Networking Products

TP-Link has revealed several high-severity vulnerabilities impacting its ISP-managed Aginet networking products, including mesh systems, routers, PON devices, and xDSL modems. These flaws, tracked as CVE-2025-30237 through CVE-2025-30241, could enable attackers with network access to bypass authentication, escalate privileges, steal sensitive information, read device files, and execute operating system commands. The most critical vulnerability, CVE-2025-30237, is an authentication bypass in the web management interface with a CVSS v4 score of 8.7, potentially granting unauthenticated attackers full control of affected devices.