Skip to main content
3 reportsPriority Medium

TP-Link and Oracle vulnerability disclosures

New vulnerabilities in TP-Link and Oracle products could allow attackers to gain unauthorised access, posing risks to UK organisations using these systems.

First report Latest

What is going on

  • A vulnerability in TP-Link TL-WA855RE was reported allowing unauthenticated attackers to perform a factory reset.
  • Another TP-Link device, TL-WR841N, was found to have an authentication bypass vulnerability that could expose stored credentials.
  • A separate vulnerability in Oracle Fusion Middleware was disclosed that allows unauthenticated remote access to Identity Manager.
  • CISA has listed some of these vulnerabilities as being actively exploited in the wild.
  • The disclosures highlight ongoing security concerns with widely used network devices and middleware platforms.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed