CVE-2025-7851 Unauthorized root access via debug functionality
Attackers can gain root shell access on TP-Link Omada gateways via debug functionality, requiring specific restricted conditions.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-7851?
CVE-2025-7851 is a high-severity vulnerability in TP-Link Systems Inc. Festa gateways, published on 21 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
Weakness: CWE-269
Which versions are affected by CVE-2025-7851?
It affects 13 products.
Products include Tp-Link Er605 Firmware, Tp-Link Er706w-4g Firmware, Tp-Link Er706w Firmware, Tp-Link Er707-M2 Firmware, Tp-Link Er7206 Firmware, Tp-Link Er7212pc Firmware and 7 more.
How do I fix CVE-2025-7851?
No fix has been published for CVE-2025-7851 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-7851 being exploited?
There is no known exploitation of CVE-2025-7851 in the wild and no public exploit code.
Other vulnerabilities in TP-Link Systems Inc. Festa gateways
Sources
Also known as GHSA-q2rh-fc48-r3gw.