deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-64469
Published: 2025-12-18
Description: There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/multiple-memory-corruption-vulnerabilities-in-ni-labview.html
CVE: CVE-2025-65007
Published: 2025-12-18
Description: In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) due to lack of authentication in the configuration change module in the adm.cgi endpoint, the unauthenticated attacker can execute commands including backup creation, device restart and resetting the device to factory settings.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version WDR28081123OV1.01 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
CWE: CWE-306
References: http://www.wodesys.com/eproductms52.html; https://cert.pl/en/posts/2025/12/CVE-2025-65007; https://github.com/wcyb/security_research
CVE: CVE-2025-65008
Published: 2025-12-18
Description: In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) due to lack of validation in the langGet parameter in the adm.cgi endpoint, the malicious attacker can execute system shell commands.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version WDR28081123OV1.01 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
CWE: CWE-78
References: http://www.wodesys.com/eproductms52.html; https://cert.pl/en/posts/2025/12/CVE-2025-65007; https://github.com/wcyb/security_research
CVE: CVE-2025-65009
Published: 2025-12-18
Description: In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) admin password is stored in configuration file as plaintext and can be obtained by unauthorized user by direct references to the resource in question.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version WDR28081123OV1.01 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
CWE: CWE-256
References: http://www.wodesys.com/eproductms52.html; https://cert.pl/en/posts/2025/12/CVE-2025-65007; https://github.com/wcyb/security_research
CVE: CVE-2025-65010
Published: 2025-12-18
Description: WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) is vulnerable to Broken Access Control in initial configuration wizard.cgi endpoint. Malicious attacker can change admin panel password without authorization. The vulnerability can also be exploited after the initial configuration has been set.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version WDR28081123OV1.01 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
CWE: CWE-306
References: http://www.wodesys.com/eproductms52.html; https://cert.pl/posts/2025/12/CVE-2025-65007; https://github.com/wcyb/security_research
CVE: CVE-2025-65011
Published: 2025-12-18
Description: In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) an unauthorised user can view configuration files by directly referencing the resource in question.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version WDR28081123OV1.01 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
CWE: CWE-425
References: http://www.wodesys.com/eproductms52.html; https://cert.pl/posts/2025/12/CVE-2025-65007; https://github.com/wcyb/security_research
CVE: CVE-2025-68324
Published: 2025-12-18
Description: In the Linux kernel, the following vulnerability has been resolved:

scsi: imm: Fix use-after-free bug caused by unfinished delayed work

The delayed work item 'imm_tq' is initialized in imm_attach() and
scheduled via imm_queuecommand() for processing SCSI commands.  When the
IMM parallel port SCSI host adapter is detached through imm_detach(),
the imm_struct device instance is deallocated.

However, the delayed work might still be pending or executing
when imm_detach() is called, leading to use-after-free bugs
when the work function imm_interrupt() accesses the already
freed imm_struct memory.

The race condition can occur as follows:

CPU 0(detach thread)   | CPU 1
                       | imm_queuecommand()
                       |   imm_queuecommand_lck()
imm_detach()           |     schedule_delayed_work()
  kfree(dev) //FREE    | imm_interrupt()
                       |   dev = container_of(...) //USE
                           dev-> //USE

Add disable_delayed_work_sync() in imm_detach() to guarantee proper
cancellation of the delayed work item before imm_struct is deallocated.
References: https://git.kernel.org/stable/c/31ab2aad7a7b7501e904a09bf361e44671f66092; https://git.kernel.org/stable/c/48dd41fa2d6c6a0c50e714deeba06ffe7f91961b; https://git.kernel.org/stable/c/9e434426cc23ad5e2aad649327b59aea00294b13
CVE: CVE-2025-68325
Published: 2025-12-18
Description: In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop

In cake_drop(), qdisc_tree_reduce_backlog() is used to update the qlen
and backlog of the qdisc hierarchy. Its caller, cake_enqueue(), assumes
that the parent qdisc will enqueue the current packet. However, this
assumption breaks when cake_enqueue() returns NET_XMIT_CN: the parent
qdisc stops enqueuing current packet, leaving the tree qlen/backlog
accounting inconsistent. This mismatch can lead to a NULL dereference
(e.g., when the parent Qdisc is qfq_qdisc).

This patch computes the qlen/backlog delta in a more robust way by
observing the difference before and after the series of cake_drop()
calls, and then compensates the qdisc tree accounting if cake_enqueue()
returns NET_XMIT_CN.

To ensure correct compensation when ACK thinning is enabled, a new
variable is introduced to keep qlen unchanged.
References: https://git.kernel.org/stable/c/0b6216f9b3d1c33c76f74511026e5de5385ee520; https://git.kernel.org/stable/c/38abf6e931b169ea88d7529b49096f53a5dcf8fe; https://git.kernel.org/stable/c/3ed6c458530a547ed0c9ea0b02b19bab620be88b
CVE: CVE-2025-7047
Published: 2025-12-18
Description: Missing Authorization vulnerability in Utarit Informatics Services Inc. SoliClub allows Privilege Abuse.This issue affects SoliClub: before 5.3.7.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://www.usom.gov.tr/bildirim/tr-25-0466
CVE: CVE-2025-7358
Published: 2025-12-18
Description: Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse.This issue affects SoliClub: before 5.3.7.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://www.usom.gov.tr/bildirim/tr-25-0466
CVE: CVE-2025-9787
Published: 2025-12-18
Description: Zohocorp ManageEngine Applications Manager versions 177400 and below are vulnerable to Stored Cross-Site Scripting vulnerability in the NOC view.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2025-9787.html
CVE: CVE-2025-14823
Published: 2025-12-18
Description: In deployments using the ScreenConnect™ Certificate Signing Extension, encrypted configuration values including an Azure Key Vault-related key, could be returned to unauthenticated users through a client-facing endpoint under certain conditions. The values remained encrypted and securely stored at rest; however, an encrypted representation could be exposed in client responses. Updating the Certificate Signing Extension to version 1.0.12 or higher ensures configuration handling occurs exclusively on the server side, preventing encrypted values from being transmitted to or rendered by client-side components.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-201
References: https://www.connectwise.com/company/trust/security-bulletins/2025-12-18-screenconnect-certificate-signing-extension-update
CVE: CVE-2025-14877
Published: 2025-12-18
Description: A vulnerability was identified in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_retailer.php. The manipulation of the argument cmbAreaCode leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ProgramShowMaker/CVE/issues/6; https://vuldb.com/?ctiid.337368; https://vuldb.com/?id.337368
CVE: CVE-2025-14878
Published: 2025-12-18
Description: A security flaw has been discovered in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/wirelessRestart of the component HTTP Request Handler. The manipulation of the argument GO results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/wirelessRestart/wirelessRestart.md; https://vuldb.com/?ctiid.337369; https://vuldb.com/?id.337369
CVE: CVE-2025-63386
Published: 2025-12-18
Description: A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/setup endpoint. The endpoint implements an insecure CORS policy that reflects any Origin header and enables Access-Control-Allow-Credentials: true, permitting arbitrary external domains to make authenticated requests. NOTE: the Supplier disputes this because the endpoint configuration is intentional to support bootstrap.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-346
References: https://gist.github.com/Cristliu/1610daac87c711ac3e0250c58f5cc4f9; https://gist.github.com/Cristliu/8ad993126be05c9210c71cc7d49fa112; https://github.com/langgenius/dify/discussions
CVE: CVE-2025-63388
Published: 2025-12-18
Description: A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/system-features endpoint. The endpoint implements an overly permissive CORS policy that reflects arbitrary Origin headers and sets Access-Control-Allow-Credentials: true, allowing any external domain to make authenticated cross-origin requests. NOTE: the Supplier disputes this, providing the rationale of "sending requests with credentials does not provide any additional access compared to unauthenticated requests."
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-346
References: https://gist.github.com/Cristliu/5ded6d03e41d7d66ecb1b568bae3ff6c; https://gist.github.com/Cristliu/c2bc7d05abd89db8eb542a453a528d77; https://github.com/langgenius/dify/discussions
CVE: CVE-2025-63389
Published: 2025-12-18
Description: A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://gist.github.com/Cristliu/48dae[PII_REDACTED]44d9fced07a544ecd; https://gist.github.com/Cristliu/b6f4d070fb27932f581be1aadc0923e7; https://github.com/ollama/ollama/issues
CVE: CVE-2025-63390
Published: 2025-12-18
Description: An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint. The endpoint fails to implement proper authentication checks, allowing unauthenticated remote attackers to enumerate and retrieve detailed information about all configured workspaces. Exposed data includes: workspace identifiers (id, name, slug), AI model configurations (chatProvider, chatModel, agentProvider), system prompts (openAiPrompt), operational parameters (temperature, history length, similarity thresholds), vector search settings, chat modes, and timestamps.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://gist.github.com/Cristliu/0897bceac5fdc2d945304b5087a84f14; https://gist.github.com/Cristliu/ba529c99abec87102e5ef36435d02a6d; https://github.com/Mintplex-Labs/anything-llm/issues
CVE: CVE-2025-63391
Published: 2025-12-18
Description: An authentication bypass vulnerability exists in Open-WebUI <=0.6.32 in the /api/config endpoint. The endpoint lacks proper authentication and authorization controls, exposing sensitive system configuration data to unauthenticated remote attackers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://gist.github.com/Cristliu/13c41b97285b776275bc8bfd3504e51b; https://gist.github.com/Cristliu/889471313b3c698fff74d32b7717807c; https://github.com/open-webui/open-webui/issues
CVE: CVE-2025-64723
Published: 2025-12-18
Description: Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the application process, gaining access to all TCC (Transparency, Consent, and Control) permissions granted to the application. The fix is included starting from the `2.3.7 ` release.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-276
References: https://github.com/arduino/arduino-ide/commit/1fa0fd31c8d6b62f19332e33713a8c5b0f4ed6f9; https://github.com/arduino/arduino-ide/pull/2805; https://github.com/arduino/arduino-ide/releases/tag/2.3.7
CVE: CVE-2025-64724
Published: 2025-12-18
Description: Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS is installed with world-writable file permissions on sensitive application components, allowing any local user to replace legitimate files with malicious code. When another user launches the application, the malicious code executes with that user's privileges, enabling privilege escalation and unauthorized access to sensitive data. The fix is included starting from the `2.3.7` release.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276
References: https://github.com/arduino/arduino-ide/pull/2805/commits/5d282f38496e96dcba02818536c0835bd684ec98; https://github.com/arduino/arduino-ide/releases/tag/2.3.7; https://github.com/arduino/arduino-ide/security/advisories/GHSA-3fvj-pgqw-fgw6
CVE: CVE-2025-68278
Published: 2025-12-18
Description: Tina is a headless content management system. In tinacms prior to version 3.1.1, tinacms uses the gray-matter package in an insecure way allowing attackers that can control the content of the processed markdown files, e.g., blog posts, to execute arbitrary code. tinacms version 3.1.1, @tinacms/cli version 2.0.4, and @tinacms/graphql version 2.0.3 contain a fix for the issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/tinacms/tinacms/commit/fa7c27abef968e3f3a3e7d564f282bc566087569; https://github.com/tinacms/tinacms/security/advisories/GHSA-529f-9qwm-9628
CVE: CVE-2025-68469
Published: 2025-12-18
Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.1-14, ImageMagick crashes when processing a crafted TIFF file. Version 7.1.1-14 fixes the issue.
CVSS Score: 3.3 (LOW)
CWE: CWE-122
References: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fff3-4rp7-px97
CVE: CVE-2025-14879
Published: 2025-12-18
Description: A weakness has been identified in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/onSSIDChange of the component HTTP Request Handler. This manipulation of the argument ssid_index causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_WH450/onSSIDChange/onSSIDChange.md; https://vuldb.com/?ctiid.337370; https://vuldb.com/?id.337370
CVE: CVE-2025-14884
Published: 2025-12-18
Description: A vulnerability was detected in D-Link DIR-605 202WWB03. Affected by this issue is some unknown functionality of the component Firmware Update Service. Performing manipulation results in command injection. The attack can be initiated remotely. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 7.2 (HIGH)
CWE: CWE-74, CWE-77, CWE-74
References: https://tzh00203.notion.site/D-Link-DIR605-B1v202WWB03-Command-Injection-in-Firmware-Update-2cab5c52018a80de8df7f427ac2faf0e?source=copy_link; https://vuldb.com/?ctiid.337372; https://vuldb.com/?id.337372
CVE: CVE-2025-14896
Published: 2025-12-18
Description: due to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an array. An attacker can craft a malicious Vega diagram specification that will allow them to send requests to any URL, including local file system paths, leading to exposure of sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://github.com/yuzutech/kroki/commit/f31093cd8a0a1d6999c43d560f62d1e82d59c77e
CVE: CVE-2025-62960
Published: 2025-12-18
Description: Missing Authorization vulnerability in sparklewpthemes Construction Light construction-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Construction Light: from n/a through <= 1.6.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Theme/construction-light/vulnerability/wordpress-construction-light-theme-1-6-7-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-62961
Published: 2025-12-18
Description: Missing Authorization vulnerability in sparklewpthemes Sparkle FSE sparkle-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sparkle FSE: from n/a through <= 1.0.9.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Theme/sparkle-fse/vulnerability/wordpress-sparkle-fse-theme-1-0-9-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-62998
Published: 2025-12-18
Description: Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot ai-co-pilot-for-wp allows Retrieve Embedded Sensitive Data.This issue affects WP AI CoPilot: from n/a through <= 1.2.7.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-201
References: https://patchstack.com/database/Wordpress/Plugin/ai-co-pilot-for-wp/vulnerability/wordpress-wp-ai-copilot-plugin-1-2-7-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2025-63002
Published: 2025-12-18
Description: Missing Authorization vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sermon Manager: from n/a through <= 2.30.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/sermon-manager-for-wordpress/vulnerability/wordpress-sermon-manager-plugin-2-30-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-63043
Published: 2025-12-18
Description: Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.23.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://patchstack.com/database/Wordpress/Plugin/post-grid/vulnerability/wordpress-post-grid-and-gutenberg-blocks-plugin-2-3-19-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE: CVE-2025-64235
Published: 2025-12-18
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AmentoTech Tuturn allows Path Traversal.This issue affects Tuturn: from n/a before 3.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://patchstack.com/database/wordpress/plugin/tuturn/vulnerability/wordpress-tuturn-plugin-3-6-arbitrary-file-download-vulnerability?_s_id=cve
CVE: CVE-2025-64236
Published: 2025-12-18
Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://patchstack.com/database/wordpress/plugin/tuturn/vulnerability/wordpress-tuturn-plugin-3-6-broken-authentication-vulnerability?_s_id=cve
CVE: CVE-2025-64282
Published: 2025-12-18
Description: Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks radius-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Blocks: from n/a through <= 2.2.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://patchstack.com/database/Wordpress/Plugin/radius-blocks/vulnerability/wordpress-radius-blocks-plugin-2-2-1-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE: CVE-2025-64355
Published: 2025-12-18
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through <= 2.7.12.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/jet-elements/vulnerability/wordpress-jetelements-for-elementor-plugin-2-7-12-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-66058
Published: 2025-12-18
Description: Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.17.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/post-grid/vulnerability/wordpress-post-grid-and-gutenberg-blocks-plugin-2-3-17-broken-access-control-vulnerability-2?_s_id=cve
CVE: CVE-2025-14737
Published: 2025-12-18
Description: Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2_160527, 

≤ 

WA850RE V3_160922.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://blog.exodusintel.com/2022/06/23/tp-link-wa850re-remote-command-injection-vulnerability/; https://www.tp-link.com/us/support/download/tl-wa850re/v2/#Firmware; https://www.tp-link.com/us/support/download/tl-wa850re/v3/#Firmware
CVE: CVE-2025-14738
Published: 2025-12-18
Description: Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2_160527,

 ≤ 

 WA850RE V3_160922.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://blog.exodusintel.com/2022/06/23/tp-link-wa850re-unauthenticated-configuration-disclosure-vulnerability/; https://www.tp-link.com/us/support/download/tl-wa850re/v2/#Firmware; https://www.tp-link.com/us/support/download/tl-wa850re/v3/#Firmware