TS
Vendor
TP-Link Systems Inc.
576
CVEs
2
On KEV
69
New 30D
Products
RV8.7
RE305 v3
TP-Link Systems Inc.
6 CVEs0 on KEV5 new
TC8.8
Tapo C200 v5
TP-Link Systems Inc.
7 CVEs0 on KEV4 new
TC8.8
Tapo C120 v1
TP-Link Systems Inc.
5 CVEs0 on KEV4 new
TC8.7
Tapo C325WB v2
TP-Link Systems Inc.
3 CVEs0 on KEV3 new
TC7.1
Tapo C210 v3.6
TP-Link Systems Inc.
2 CVEs0 on KEV2 new
TC7.1
Tapo C500 v2.0
TP-Link Systems Inc.
2 CVEs0 on KEV2 new
KE6.5
Kasa EC70 v4
TP-Link Systems Inc.
3 CVEs0 on KEV1 new
KE6.5
Kasa EC71 v4
TP-Link Systems Inc.
3 CVEs0 on KEV1 new
AC6.9
Archer C7 v5
TP-Link Systems Inc.
2 CVEs0 on KEV1 new
DM7.7
Deco M9 Plus V2
TP-Link Systems Inc.
2 CVEs0 on KEV1 new
HV8.7
HS300 v2
TP-Link Systems Inc.
2 CVEs0 on KEV1 new
KV8.7
KP200 v3
TP-Link Systems Inc.
2 CVEs0 on KEV1 new
KV8.7
KP303 v2
TP-Link Systems Inc.
2 CVEs0 on KEV1 new
OS7.5
Omada Software Controller
TP-Link Systems Inc.
2 CVEs0 on KEV1 new
AA7.7
Archer AX90 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
AC5.9
Archer C6 V2
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
DB6.8
Deco BE63 V2.0
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
EV8.7
EP10 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
EV8.7
EP40 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
EV8.7
EP40A v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
EV8.7
ES20M v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
HV8.7
HS103 v5
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
HV8.7
HS200 v5
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
HV8.7
HS210 v3
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
HV8.7
HS220 v3
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KL110 v4
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KL125 v4
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KL135 v2
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KL420L5 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KP115 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KP400 v3
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KP401 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KP405 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KS200 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KS200M v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KS220 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KV8.7
KS220M v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
KK8.7
KS230 KIT v2
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE190 v5
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE200 v5
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE205 v4
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE215 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE220 v3
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE230 v2
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE300 v2
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE305 v4
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE315 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE330 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE335 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE365 v2
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE365 v3
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE450 v4.8
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE550 v1
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
RV5.9
RE750C v4
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
TC8.5
Tapo C320WS v2
TP-Link Systems Inc.
1 CVEs0 on KEV1 new
AC7.2
Archer C7(EU) V2
TP-Link Systems Inc.
1 CVEs1 on KEV0 new
TV7.2
TL-WR841N/ND(MS) V9
TP-Link Systems Inc.
1 CVEs1 on KEV0 new
OA7.5
Omada Access Points
TP-Link Systems Inc.
7 CVEs0 on KEV0 new
OG7.5
Omada Gateways
TP-Link Systems Inc.
7 CVEs0 on KEV0 new
OS7.5
Omada Switches
TP-Link Systems Inc.
7 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102816 New | RV RE305 v3 TP-Link Systems Inc. | 5.3 | Oct 27 | Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305 |
| CVE-2026-102815 New | RV RE305 v3 TP-Link Systems Inc. | 6.9 | Oct 27 | Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305 |
| CVE-2026-102814 New | RV RE305 v3 TP-Link Systems Inc. | 8.7 | Oct 27 | Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305 |
| CVE-2026-102813 New | RV RE305 v3 TP-Link Systems Inc. | 6.1 | Oct 27 | Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305 |
| CVE-2026-102812 New | RV RE305 v3 TP-Link Systems Inc. | 6.9 | Oct 27 | Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7 |
| CVE-2026-100420 New | DB Deco BE63 V2.0 TP-Link Systems Inc. | 6.8 | Oct 21 | Information disclosure vulnerability in the cloud-client daemon of Deco BE63 |
| CVE-2026-89052 New | AC Archer C6 V2 TP-Link Systems Inc. | 5.9 | Oct 21 | Hardcoded AES encryption key in Archer C6 |
| CVE-2026-105815 | TC Tapo C210 v3.6 TP-Link Systems Inc. | 7.1 | Oct 19 | Credential Material Exposure Leading to Unauthorized Streamed Media-Session Access in TP-Link Tapo C210 |
| CVE-2026-105814 | TC Tapo C210 v3.6 TP-Link Systems Inc. | 5.3 | Oct 19 | Order-Dependent Authentication Bypass in the DS JSON API in TP-Link Tapo C210 |
| CVE-2026-105810 | TC Tapo C320WS v2 TP-Link Systems Inc. | 8.5 | Oct 19 | Authenticated Local Stack Overflow in TP-Link Tapo C320WS |
| CVE-2026-107795 | OS Omada Software Controller TP-Link Systems Inc. | 7.5 | Oct 14 | Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management API |
| CVE-2026-109506 | RV RE305 v4 TP-Link Systems Inc. | 5.9 | Oct 14 | Improper Authentication in Multiple TP-Link WiFi Repeaters |
| CVE-2026-108473 | EV ES20M v1 TP-Link Systems Inc. | 8.7 | Oct 14 | Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices |
| CVE-2026-105674 | TC Tapo C325WB v2 TP-Link Systems Inc. | 8.7 | Oct 8 | Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WB |
| CVE-2026-105672 | TC Tapo C325WB v2 TP-Link Systems Inc. | 8.7 | Oct 8 | Unauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WB |
| CVE-2026-105673 | TC Tapo C325WB v2 TP-Link Systems Inc. | 7.1 | Oct 8 | Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WB |
| CVE-2026-104945 | TC Tapo C500 v2.0 TP-Link Systems Inc. | 6.8 | Oct 6 | Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500 |
| CVE-2026-104944 | TC Tapo C500 v2.0 TP-Link Systems Inc. | 7.1 | Oct 6 | Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500 |
| CVE-2026-102370 | KE Kasa EC71 V4 TP-Link Systems Inc. | 5.4 | Oct 1 | Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71 |
| CVE-2026-84682 | AA Archer AX90 v1 TP-Link Systems Inc. | 7.7 | Oct 1 | TDDPv2 setProductVer Command Injection in Archer AX90 |
| CVE-2026-8618 | DM Deco M9 Plus V2 TP-Link Systems Inc. | 7.7 | Oct 1 | Pre-Authentication Stack-based Buffer Overflow Remote Code Execution in TDDPv2 Subtype 0x91 on Deco M9 Plus |
| CVE-2026-102369 | TC Tapo C120 v1 TP-Link Systems Inc. | 8.7 | Oct 1 | Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200 |
| CVE-2026-78578 | TC Tapo C120 v1 TP-Link Systems Inc. | 7.1 | Oct 1 | Unauthenticated do Method Onboarding Connect Allows Wi‑Fi Reconfiguration Denial of Service Vulnerability in TP-Link Tapo C120 & C200 |
| CVE-2026-78577 | TC Tapo C120 v1 TP-Link Systems Inc. | 5.3 | Oct 1 | Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200 |
| CVE-2026-9032 | TC Tapo C200 V5 TP-Link Systems Inc. | 7.1 | Oct 1 | Unauthenticated Onboarding Connect NULL Pointer Dereference Denial of Service Vulnerability in TP-Link Tapo C120 & C200 |
| CVE-2026-84941 | OS Omada Software Controller (Windows) TP-Link Systems Inc. | 6.9 | Sep 10 | Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read |
| CVE-2026-17176 | DB Deco BE11000 V2 TP-Link Systems Inc. | 7.7 | Sep 10 | OS Command Injection Vulnerability in Deco Devices |
| CVE-2026-76652 | AM Archer MR600 TP-Link Systems Inc. | 4.8 | Sep 10 | Authenticated Directory Traversal Vulnerability in File Upload Functionality in TP-Link TL-MR6400 and Archer MR600 |
| CVE-2026-76653 | TV TL-MR6400 v8 TP-Link Systems Inc. | 5.3 | Sep 10 | Missing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR600 |
| CVE-2026-85384 | RA RE210 AC750 TP-Link Systems Inc. | 8.5 | Sep 8 | Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import |
| CVE-2026-81531 | OV OC200 v2 TP Link Systems Inc. | 6.9 | Sep 8 | Unauthenticated Account Information Disclosure in Multiple Omada Controllers |
| CVE-2026-18167 | AA Archer AX55 v4 TP-Link Systems Inc. | 7.7 | Sep 3 | Stack-based buffer overflow in TP-Link Archer AX55 v4 |
| CVE-2026-18330 | RV RE305 v3 TP-Link Systems Inc. | 6.1 | Sep 3 | Hardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7 |
| CVE-2026-75118 | TV TL-MR100 v3.20 TP-Link Systems Inc. | 8.7 | Aug 28 | http_gdpr_decrypt Pre-Authentication Stack-Based Buffer Overflow |
| CVE-2026-76784 | KP KP115 TP-Link Systems Inc. | 8.7 | Aug 26 | Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices |
| CVE-2026-78541 | AB Archer BE3600 v1 TP-Link Systems Inc. | 8.5 | Aug 24 | Command Injection in Parent Control of TP-Link Archer BE3600 v1 |
| CVE-2026-16348 | AB Archer BE800 v1 TP-Link Systems Inc. | 8.5 | Aug 24 | Command Injection Vulnerability in VPN connection of Archer BE800 |
| CVE-2026-9254 | AB Archer BE800 V1 TP-Link Systems Inc. | 8.7 | Aug 24 | Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices |
| CVE-2026-15469 | DX Deco XE75 v3 / XE5300 v3.6/ WE10800 v3.6 TP-Link Systems Inc. | 7.7 | Aug 24 | Hard-coded Mesh Group Private Key in TP-Link Deco XE75, XE5300, and WE10800 |
| CVE-2026-17252 | TV TL-MR6400 v7.0 TP-Link Systems Inc. | 7.1 | Aug 21 | Unauthenticated Denial of Service via Composed HTTP Parsing and Stack-Based Out-of-Bounds Write Vulnerability in TL-MR6400 Web Management Interface |
| CVE-2026-17251 | TV TL-MR6400 v7.0 TP-Link Systems Inc. | 7.1 | Aug 21 | Unauthenticated Denial of Service via Null Pointer Dereference in HTTP Request Parsing |
| CVE-2026-17250 | TV TL-MR6400 v7.0 TP-Link Systems Inc. | 8.5 | Aug 21 | Authenticated Remote Code Execution via Stack-Based Buffer Overflow in Firmware Update Handling |
| CVE-2026-19683 | EV ER7206 v2 TP-Link Systems Inc. | 7.4 | Aug 20 | Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways |
| CVE-2026-19586 | EV ER605W v2 TP-Link Systems Inc. | 9.8 | Aug 20 | Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways |
| CVE-2026-9033 | EV ER706WP-4G v1 TP-Link Systems Inc. | 4.3 | Aug 20 | Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways |
| CVE-2026-8619 | TV TL-MR100 v3.2 TP-Link Systems Inc. | 7.5 | Aug 19 | Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600 |
| CVE-2026-75616 | AC Archer C20 v6 TP-Link Systems Inc. | 6.8 | Aug 19 | Command Injection in Router Web Management Interface |
| CVE-2026-75619 | TC Tapo C101 v5 TP-Link Systems Inc. | 5.7 | Aug 19 | RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101 |
| CVE-2026-75618 | TC Tapo C100 v5 TP-Link Systems Inc. | 6.5 | Aug 19 | RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101 |
| CVE-2026-15316 | TC Tapo C200 v5 TP-Link Systems Inc. | 6.5 | Aug 18 | Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200 |
| CVE-2026-15315 | TC Tapo C120 v1 TP-Link Systems Inc | 8.8 | Aug 18 | Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200 |
| CVE-2026-15141 | TV TL-WR820N v2 TP-Link Systems Inc. | 5.7 | Aug 12 | Referer Validation Bypass in TL-WR820N Web Management Interface |
| CVE-2025-30241 | H1 HB710(EU1) 1.0 TP-Link Systems Inc. | 8.6 | Aug 10 | OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices |
| CVE-2025-30240 | HB HB610(EU1) TP-Link Systems Inc. | 5.1 | Aug 10 | Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices |
| CVE-2025-30239 | XX XX530v(BR)v1.0 TP-Link Systems Inc. | 8.5 | Aug 10 | Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices |
| CVE-2025-30238 | HV HB810(US2) V1.0/1.6/2.0/2.6 TP-Link Systems Inc. | 8.6 | Aug 10 | Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices |
| CVE-2025-30237 | HV HB810(US2) V1.0/1.6/2.0/2.6 TP-Link Systems Inc. | 8.7 | Aug 10 | Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet Devices |
| CVE-2026-12339 | TV TL-MR6400 v8.0 TP-Link Systems Inc. | 6.9 | Aug 10 | Authenticated Arbitrary File Write Vulnerability in multiple devices |
| CVE-2026-9031 | AA Archer A6 v4 TP-Link Systems Inc. | 6.8 | Aug 7 | Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6 |
| CVE-2026-9030 | AA Archer A6 v4 TP-Link Systems Inc. | 6.8 | Aug 7 | Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6 |
