3 reportsPriority Medium
TP-Link and Oracle vulnerability disclosures
New vulnerabilities in TP-Link and Oracle products could allow attackers to gain unauthorised access, posing risks to UK organisations using these systems.
First report Latest
What is going on
- A vulnerability in TP-Link TL-WA855RE was reported allowing unauthenticated attackers to perform a factory reset.
- Another TP-Link device, TL-WR841N, was found to have an authentication bypass vulnerability that could expose stored credentials.
- A separate vulnerability in Oracle Fusion Middleware was disclosed that allows unauthenticated remote access to Identity Manager.
- CISA has listed some of these vulnerabilities as being actively exploited in the wild.
- The disclosures highlight ongoing security concerns with widely used network devices and middleware platforms.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority MediumType VulnerabilityLead report
TP-link TL-WA855RE Missing Authentication Vulnerability
- Priority MediumType Vulnerability
TP-Link TL-WR841N Authentication Bypass Vulnerability
- Priority MediumType Vulnerability
Oracle Fusion Middleware Missing Authentication Vulnerability

