Two security flaws have been spotted in TP-Link routers , and one is the result of the company's patch for a previous flaw.

That’s according to Forescout Research's Vedere Labs, which spotted a flaw (CVE-2025-7850) that allows OS command injection via WireGuard VPN settings.

Another (CVE-2025-7851) allows unauthorized root access via residual debug code following a patch of a previous flaw.

Researchers Stanislav Dashevskyi and Francesco La Spina said they partially pinned their discovery on the use of a technique called "vulnerability variant hunting".

This is a technique whereby an attacker – or in this case, researcher – looks for new ways to exploit a known bug rather than take the "time-consuming and labor-intensive" effort of looking for an entirely fresh one.

"Vendors typicall

See Full Page