CVE-2025-9293

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Feb 13, 2026
Source updated: Feb 13, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception

A vulnerability in the certificate validation logic may allow applications to accept untrusted or improperly validated server identities during TLS communication. An attacker in a privileged network position may be able to intercept or modify traffic if they can position themselves within the communication channel. Successful exploitation may compromise confidentiality, integrity, and availability of application data.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Tapo App

Vendor: TP-Link Systems Inc.
Product: Tapo App
Platforms: Android
Default status: unaffected

Tapo App · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.14.111	Unavailable	None listed

Kasa App

Vendor: TP-Link Systems Inc.
Product: Kasa App
Platforms: Android
Default status: unaffected

Kasa App · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.4.350	Unavailable	None listed

Omada App

Vendor: TP Link Systems Inc.
Product: Omada App
Platforms: Android
Default status: unaffected

Omada App · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.25.25	Unavailable	None listed

Omada Guard

Vendor: TP-Link Systems Inc.
Product: Omada Guard
Platforms: Android
Default status: unaffected

Omada Guard · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	1.1.28	Unavailable	None listed

Tether App

Vendor: TP-Link Systems Inc.
Product: Tether App
Platforms: Android
Default status: unaffected

Tether App · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	4.12.27	Unavailable	None listed

Deco App

Vendor: TP-Link Systems Inc.
Product: Deco App
Platforms: Android
Default status: unaffected

Deco App · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.9.163	Unavailable	None listed

Aginet App

Vendor: TP-Link Systems Inc.
Product: Aginet App
Platforms: Android
Default status: unaffected

Aginet App · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.13.6	Unavailable	None listed

tpCamera App

Vendor: TP-Link Systems Inc.
Product: tpCamera App
Platforms: Android
Default status: unaffected

tpCamera App · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.2.17	Unavailable	None listed

WiFi Toolkit

Vendor: TP-Link Systems Inc.
Product: WiFi Toolkit
Platforms: Android
Default status: unaffected

WiFi Toolkit · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	1.4.28	Unavailable	None listed

Festa App

Vendor: TP-Link Systems Inc.
Product: Festa App
Platforms: Android
Default status: unaffected

Festa App · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	1.7.1	Unavailable	None listed

Wi-Fi Navi

Vendor: TP-Link Systems Inc.
Product: Wi-Fi Navi
Platforms: Android
Default status: unaffected

Wi-Fi Navi · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	1.5.5	Unavailable	None listed

KidShield

Vendor: TP-Link Systems Inc.
Product: KidShield
Platforms: Android
Default status: unaffected

KidShield · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	1.1.21	Unavailable	None listed

TP-Partner App

Vendor: TP-Link Systems Inc.
Product: TP-Partner App
Platforms: Android
Default status: unaffected

TP-Partner App · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.0.1	Unavailable	None listed

VIGI App

Vendor: TP-Link Systems Inc.
Product: VIGI App
Platforms: Android
Default status: unaffected

VIGI App · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.7.70	Unavailable	None listed