The U.S. Cybersecurity and Infrastructure Safety Company (CISA) on Tuesday added a high-severity security flaw impacting TP-Hyperlink TL-WA855RE Wi-Fi Ranger Extender merchandise to its Identified Exploited Vulnerabilities (KEV) catalog, citing proof of lively exploitation.
The vulnerability, CVE-2020-24363 (CVSS rating: 8.8), considerations a case of lacking authentication that might be abused to acquire elevated entry to the inclined gadget.
“This vulnerability may enable an unauthenticated attacker (on the identical community) to submit a TDDP_RESET POST request for a manufacturing unit reset and reboot,” the company stated. “The attacker can then acquire incorrect entry management by setting a brand new administrative password.”
In accordance with malwrforensics, the problem has been fastened with firmware model TL-WA855RE(EU)_V5_200731. Nonetheless, it bears noting that the product has reached end-of-life (EoL) standing, which means it is unlikely to obtain any patches or updates. Customers of the Wi-Fi vary extender are suggested to interchange their gear with a more moderen mannequin that addresses the problem.
CISA has not shared any particulars on how the vulnerability is being exploited within the wild, by whom, or on the dimensions of such assaults.
Additionally added to the KEV catalog is a security flaw that WhatsApp disclosed final week (CVE-2025-55177, CVSS rating: 5.4) as having been exploited as a part of a highly-targeted spyware and adware marketing campaign by chaining it with an Apple iOS, iPadOS, and macOS vulnerability (CVE-2025-43300, CVSS rating: 8.8).
Not a lot is understood about who was focused and which industrial spyware and adware vendor is behind the assaults, however WhatsApp advised The Hacker Information that it despatched in-app risk notifications to lower than 200 customers who might have been focused as a part of the marketing campaign.
Federal Civilian Govt Department (FCEB) companies are suggested to use the required mitigations by September 23, 2025, for each the vulnerabilities to counter lively threats.
