TP
Vendor
Tp-link
2,643
CVEs
82
On KEV
0
New 30D
Products
TF9.8
Tl-wr841n Firmware
Tp-link
39 CVEs4 on KEV0 new
TF8.8
Tl-wr740n Firmware
Tp-link
10 CVEs3 on KEV0 new
AC9.8
Archer C7 Firmware
Tp-link
7 CVEs3 on KEV0 new
TF7.5
Tl-wr841nd Firmware
Tp-link
7 CVEs3 on KEV0 new
TF9.9
Tl-wr940n Firmware
Tp-link
22 CVEs2 on KEV0 new
TF9.8
Tl-wdr4300 Firmware
Tp-link
7 CVEs2 on KEV0 new
AC9.8
Archer C5 Firmware
Tp-link
6 CVEs2 on KEV0 new
TF8.8
Tl-wdr3600 Firmware
Tp-link
3 CVEs2 on KEV0 new
MR8.8
Multiple Routers
TP-Link
2 CVEs2 on KEV0 new
TF7.5
Tl-wr741nd Firmware
Tp-link
2 CVEs2 on KEV0 new
TF9.8
Tl-wr840n Firmware
Tp-link
22 CVEs1 on KEV0 new
TF8.8
Tl-wr941nd Firmware
Tp-link
7 CVEs1 on KEV0 new
AA9.8
Archer Ax21 Firmware
Tp-link
6 CVEs1 on KEV0 new
TF9.8
Tl-wr902ac Firmware
Tp-link
6 CVEs1 on KEV0 new
TL6.5
TL-WR841N
TP-Link
4 CVEs1 on KEV0 new
AC8.8
Archer C9 Firmware
Tp-link
3 CVEs1 on KEV0 new
TL6.5
TL-WDR4300
TP-Link
3 CVEs1 on KEV0 new
TF9.8
Tl-wr710n Firmware
Tp-link
3 CVEs1 on KEV0 new
MF9.8
Mr3420 Firmware
Tp-link
2 CVEs1 on KEV0 new
MF9.8
Mr6400 Firmware
Tp-link
2 CVEs1 on KEV0 new
TF9.8
Tl-mr3020 Firmware
Tp-link
2 CVEs1 on KEV0 new
TF6.5
Tl-mr3220 Firmware
Tp-link
2 CVEs1 on KEV0 new
TF8.8
Tl-wa855re Firmware
Tp-link
2 CVEs1 on KEV0 new
TF8.8
Tl-wdr3500 Firmware
Tp-link
2 CVEs1 on KEV0 new
TL6.5
TL-WR740N
TP-Link
2 CVEs1 on KEV0 new
TF7.7
Tl-wr743nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wa701nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wa801nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wa901nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wdr3500 Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr1043nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr1045nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr749n Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr802n Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr841hp Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr842n Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr842nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr845n Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr941hp Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr945n Firmware
Tp-link
2 CVEs1 on KEV0 new
AA8.8
Archer AX21
TP-Link
1 CVEs1 on KEV0 new
AC6.5
Archer C1900 Firmware
Tp-link
1 CVEs1 on KEV0 new
AC6.5
Archer C5
TP-Link
1 CVEs1 on KEV0 new
AC6.5
Archer C7
TP-Link
1 CVEs1 on KEV0 new
AC7.5
Archer C8 Firmware
Tp-link
1 CVEs1 on KEV0 new
MA7.5
Multiple Archer Devices
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-MR3420
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-MR6400
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WA801ND
TP-Link
1 CVEs1 on KEV0 new
TL8.8
TL-WA855RE
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WA901ND
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WDR3500
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WDR3600
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WR1043ND
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WR1045ND
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WR741ND
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WR749N
TP-Link
1 CVEs1 on KEV0 new
TF6.5
Tl-wr810n Firmware
Tp-link
1 CVEs1 on KEV0 new
TL6.5
TL-WR840N
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WR841ND
TP-Link
1 CVEs1 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-19683 | EF Er701-5g-outdoor Firmware Tp-link | 7.4 | Aug 20 | Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways |
| CVE-2026-19586 | EF Er706wp-4g Firmware Tp-link | 9.8 | Aug 20 | Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways |
| CVE-2026-9033 | DF Dr3220v-4g Firmware Tp-link | 4.3 | Aug 20 | Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways |
| CVE-2026-8619 | TF Tl-mr100 Firmware Tp-link | 7.5 | Aug 19 | Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600 |
| CVE-2026-75616 | AC Archer C20 Firmware Tp-link | 6.8 | Aug 19 | Command Injection in Router Web Management Interface |
| CVE-2026-75619 | TC Tapo C101 Firmware Tp-link | 5.7 | Aug 19 | RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101 |
| CVE-2026-75618 | TC Tapo C100 Firmware Tp-link | 6.5 | Aug 19 | RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101 |
| CVE-2026-15316 | TC Tapo C200 Firmware Tp-link | 6.5 | Aug 18 | Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200 |
| CVE-2026-15315 | TC Tapo C120 Firmware Tp-link | 8.8 | Aug 18 | Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200 |
| CVE-2026-15141 | TF Tl-wr820n Firmware Tp-link | 5.7 | Aug 12 | Referer Validation Bypass in TL-WR820N Web Management Interface |
| CVE-2026-15314 | TP Tapo P110 Firmware Tp-link | 7.5 | Aug 4 | Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110 |
| CVE-2025-15631 | OF Omada Fusion 2.5g Firmware Tp-link | 5.9 | Aug 3 | Weak Credential Storage in TP-Link Omada Devices |
| CVE-2025-15630 | OS Omada Sg6654x Firmware Tp-link | 5.9 | Aug 3 | Device Provisioning Race Condition in TP-Link Omada Adoption Workflow |
| CVE-2025-15629 | OS Omada Sg3428xmp Firmware Tp-link | 7.5 | Aug 3 | Weak Session Key Generation in TP-Link Omada Adoption Protocol |
| CVE-2025-15628 | OS Omada Sg3428xmp Firmware Tp-link | 7.5 | Aug 3 | Hardcoded Certificates in TP-Link Omada Device Communications |
| CVE-2025-15627 | OO Omada Oc300 Firmware Tp-link | 7.5 | Aug 3 | Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication |
| CVE-2025-15544 | OS Omada S6500-48gp6xf Firmware Tp-link | 5.9 | Aug 3 | Weak Credential Protection During TP-Link Omada Device Adoption |
| CVE-2025-9291 | OS Omada Sg3452xmpp Firmware Tp-link | 6.5 | Aug 3 | Improper Certificate Validation in TP-Link Omada Cloud Communications |
| CVE-2026-9044 | AA Archer Axe75 Firmware Tp-link | 8.0 | Jul 31 | Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75 |
| CVE-2026-13230 | KE Kasa Ec71 Firmware Tp-link | 6.5 | Jul 15 | Information Disclosure Vulnerability in Local Discovery Response in TP-Link Kasa EC70 and EC71 |
| CVE-2026-9770 | KE Kasa Ec70 Firmware Tp-link | 5.3 | Jul 15 | Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71 |
| CVE-2026-5040 | DM Deco M5 Firmware Tp-link | 6.7 | Jul 14 | Weak Password Hashing Mechanism in TP-Link Deco M5 |
| CVE-2026-15429 | AV Archer Vx1800v Firmware Tp-link | 8.8 | Jul 14 | Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800v |
| CVE-2026-15428 | AV Archer Vx1800v Firmware Tp-link | 8.8 | Jul 14 | OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v |
| CVE-2026-15427 | AV Archer Vx1800v Firmware Tp-link | 8.1 | Jul 14 | OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v |
| CVE-2026-9105 | TF Tl-wr841n Firmware Tp-link | 6.5 | Jun 29 | Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web Interface |
| CVE-2026-12760 | TC Tapo C200 Firmware Tp-link | 6.5 | Jun 24 | Denial-of-Service Vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C200 |
| CVE-2026-11409 | TF Tl-wr940n Firmware Tp-link | 7.2 | Jun 16 | OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N |
| CVE-2026-11410 | TF Tl-wr940n Firmware Tp-link | 7.2 | Jun 16 | OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N |
| CVE-2026-6250 | TC Tapo C110 Firmware Tp-link | 8.1 | Jun 11 | Authenticated Format String Injection on TP-Link Tapo C110 |
| CVE-2026-8714 | TC Tapo C520ws Firmware Tp-link | 6.5 | Jun 5 | Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS |
| CVE-2026-1871 | TC Tapo C200 Firmware Tp-link | 6.5 | Jun 2 | Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200 |
| CVE-2026-34127 | TF Tl-sg108pe Firmware Tp-link | 4.8 | May 29 | Stored Cross-Site Scripting (XSS) via Configuration File Import on TP-Link's TL-SG108PE |
| CVE-2026-34126 | TD Tapo D100c Firmware Tp-link | 7.5 | May 28 | Bluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100C |
| CVE-2026-8697 | AC Archer C64 Firmware Tp-link | 8.8 | May 28 | Improper Authentication Rate Limiting on TP-Link's Archer C64 |
| CVE-2026-5509 | AB Archer Be450 Firmware Tp-link | 7.2 | May 27 | Arbitrary Command Injection via Browser Developer Console in TP-Link Archer BE450 and BE7200 |
| CVE-2026-3294 | RF Re360 Firmware Tp-link | 8.8 | May 22 | Authentication Logic Vulnerability on Multiple TP-Link Range Extenders |
| CVE-2026-5511 | AA Archer Ax72 Firmware Tp-link | 2.7 | May 19 | Information Disclosure via Diagnostic Interface Due to Improper Input Validation on TP-Link's Archer AX72 |
| CVE-2018-25321 | TW TL-WR720NMbps Wireless N Router Tp-link | 4.3 | May 17 | TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719) |
| CVE-2026-5039 | TF Tl-wr841n Firmware Tp-link | 8.8 | Apr 23 | Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N |
| CVE-2026-5363 | AC Archer C7 Firmware Tp-link | 8.8 | Apr 16 | Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation. The web interface encrypts the admin password… |
| CVE-2026-30818 | AA Archer Ax53 Firmware Tp-link | 8.0 | Apr 8 | An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a specially… |
| CVE-2026-30817 | AA Archer Ax53 Firmware Tp-link | 5.7 | Apr 8 | An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious… |
| CVE-2026-30816 | AA Archer Ax53 Firmware Tp-link | 5.7 | Apr 8 | An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious… |
| CVE-2026-30815 | AA Archer Ax53 Firmware Tp-link | 8.0 | Apr 8 | An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially… |
| CVE-2026-30814 | AA Archer Ax53 Firmware Tp-link | 8.0 | Apr 8 | A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute… |
| CVE-2026-34124 | TC Tapo C520ws Firmware Tp-link | 6.5 | Apr 2 | A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic |
| CVE-2026-34122 | TC Tapo C520ws Firmware Tp-link | 6.5 | Apr 2 | A stack-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within a configuration handling component due to insufficient input validation |
| CVE-2026-34121 | TC Tapo C520ws Firmware Tp-link | 8.8 | Apr 2 | An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and… |
| CVE-2026-34120 | TC Tapo C520ws Firmware Tp-link | 6.5 | Apr 2 | A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of local video stream content due to insufficient alignment… |
| CVE-2026-34119 | TC Tapo C520ws Firmware Tp-link | 6.5 | Apr 2 | A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when appending segmented request bodies without continuous… |
| CVE-2026-34118 | TC Tapo C520ws Firmware Tp-link | 6.5 | Apr 2 | Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C100, C101, C210 & C520WS |
| CVE-2026-4346 | TF Tl-wr850n Firmware Tp-link | 6.8 | Mar 26 | The vulnerability affecting TL-WR850N v3 allows cleartext storage of administrative and Wi-Fi credentials in a region of the device’s flash memory while the serial interface… |
| CVE-2026-3622 | TF Tl-wr841n Firmware Tp-link | 7.5 | Mar 26 | The vulnerability exists in the UPnP component of TL-WR841N v14, where improper input validation leads to an out-of-bounds read, potentially causing a crash of the UPnP service |
| CVE-2025-15606 | TF Td-w8961nd Firmware Tp-link | 7.5 | Mar 23 | A Denial-of-Service (DoS) vulnerability in the httpd component of TP-Link's TD-W8961N v4.0 due to improper input sanitization, allows crafted requests to trigger a processing… |
| CVE-2025-15605 | AN Archer Nx600 Firmware Tp-link | 7.3 | Mar 23 | A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data |
| CVE-2025-15519 | AN Archer Nx210 Firmware Tp-link | 7.2 | Mar 23 | Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an… |
| CVE-2025-15518 | AN Archer Nx600 Firmware Tp-link | 7.2 | Mar 23 | Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an… |
| CVE-2025-15517 | AN Archer Nx600 Firmware Tp-link | 8.1 | Mar 23 | A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated… |
| CVE-2025-15608 | AA Archer Ax53 Firmware Tp-link | 9.8 | Mar 20 | This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a… |
