Approved changes feed: RSS · Atom

cpe:2.3:a:tp-link_systems_inc.:tl-sg108pe_v5:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTp Link Systems Inc. (48bb0273-54d9-5a12-8b5a-2521b7aba122)
ProductTl Sg108Pe V5 (2eb2a0b7-6c10-5784-be3c-b794b3dccfe2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-34127 vulnerable 2026-06-08 07:59:11.826073 Stored Cross-Site Scripting (XSS) via Configuration File Import on TP-Link's TL-SG108PE
A stored cross-site scripting (XSS) vulnerability has been identified in the web management interface of TP-Link's TL-SG108PE v5 switch due to improper sanitation of the SYSNAM configuration parameter during configuration file import. An attacker with administrator access can inject malicious script into the device configuration, which may be stored and executed in the administrator’s browser when the affected interface is viewed.     Successful exploitation may allow session cookie theft, unauthorized configuration changes, or access to sensitive information exposed through the management interface.
Published: 2026-05-29T18:59:14.008Z
Updated: 2026-05-29T19:50:18.478Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.