A vulnerability disclosed in 2023 is back in the news — because attackers are actively using it right now. CVE-2023-33538 is a command injection bug with a CVSS score of 8.8 The Hacker News in several TP-Link home router models. CISA added it to its Known Exploited Vulnerabilities catalog in June 2025 CVE Details , and Unit 42 researchers confirmed active exploitation attempts shortly after. The s
CVE-2023-33538: The TP-Link Command Injection Flaw That's Still Being Actively Exploited
Om Shree·Dev.to··1 min read
D
Continue reading on Dev.to
This article was sourced from Dev.to's RSS feed. Visit the original for the complete story.