Tp-Link

Vulnerability activity for Tp-Link: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 2
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 365 days

CVEs: 3
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

8.6HighAug 29, 2025TP-Link Multiple Routers Code / command injectionCVE-2025-9377TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Added to KEV Sep 3, 2025 · 4 days after publicationExploited38% likely
6.5MediumMay 3, 2024TP-Link TL-WR841N Auth bypass / access controlCVE-2023-50224TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Added to KEV Sep 3, 2025 · 488 days after publicationExploited20% likely
8.8HighAug 31, 2020TP-Link TL-WA855RE Auth bypass / access controlCVE-2020-24363TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Added to KEV Sep 2, 2025 · 1,827 days after publicationExploited22% likelyExploit codeExploit-DB
8.8HighJun 7, 2023TP-Link Multiple Routers Code / command injectionCVE-2023-33538TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Added to KEV Jun 16, 2025 · 740 days after publicationExploited42% likelyDetection
8.8HighMar 15, 2023TP-Link Archer AX21 Code / command injectionCVE-2023-1389TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.Added to KEV May 1, 2023 · 47 days after publicationExploited100% likelyExploit codeExploit-DB · NucleiDetection
7.5HighApr 17, 2015TP-Link Multiple Archer Devices Path traversal / file handlingCVE-2015-3035Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.Added to KEV Mar 25, 2022 · 2,533 days after publicationExploited84% likelyExploit codeMetasploit · NucleiDetection

Recent

7.5HighAug 20, 2026Tp-Link tl-mr100 firmware Memory corruptionCVE-2026-8619An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send a specially crated HTTP request to trigger a crash of the HTTP service process. Successful exploitation may cause the HTTP service to crash, making the web management interface and HTTP-dependent f
7.5HighAug 4, 2026Tp-Link tapo p110 firmware Memory corruptionCVE-2026-15314Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash. Successful exploitation may cause the web service process to stop responding or restart, resulting in a denial-of-service condition.
8.0HighFeb 2, 2026Tp-Link archer be230 firmware Code / command injectionCVE-2026-0631An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1, AX10 v3 and AXE75 v1, allowing an adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability. This CVE covers one of multiple distinct OS command injection issues ident1.6% likely
6.5MediumMay 3, 2024TP-Link TL-WR841N Auth bypass / access controlCVE-2023-50224TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Exploited20% likely
8.6HighAug 29, 2025TP-Link Multiple Routers Code / command injectionCVE-2025-9377TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Exploited38% likely
8.8HighAug 31, 2020TP-Link TL-WA855RE Auth bypass / access controlCVE-2020-24363TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Exploited22% likelyExploit codeExploit-DB
8.8HighJun 7, 2023TP-Link Multiple Routers Code / command injectionCVE-2023-33538TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Exploited42% likelyDetection
8.8HighMar 15, 2023TP-Link Archer AX21 Code / command injectionCVE-2023-1389TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.Exploited100% likelyExploit codeExploit-DB · NucleiDetection
7.5HighApr 17, 2015TP-Link Multiple Archer Devices Path traversal / file handlingCVE-2015-3035Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.Exploited84% likelyExploit codeMetasploit · NucleiDetection

See every Tp-Link entry on the dashboard.