TP
Vendor
Tp-link
2,777
CVEs
82
On KEV
0
New 30D
Products
TF9.8
Tl-wr841n Firmware
Tp-link
39 CVEs4 on KEV0 new
TF8.8
Tl-wr740n Firmware
Tp-link
10 CVEs3 on KEV0 new
AC9.8
Archer C7 Firmware
Tp-link
8 CVEs3 on KEV0 new
TF7.5
Tl-wr841nd Firmware
Tp-link
7 CVEs3 on KEV0 new
TF9.9
Tl-wr940n Firmware
Tp-link
22 CVEs2 on KEV0 new
TF9.8
Tl-wdr4300 Firmware
Tp-link
7 CVEs2 on KEV0 new
AC9.8
Archer C5 Firmware
Tp-link
6 CVEs2 on KEV0 new
TF8.8
Tl-wdr3600 Firmware
Tp-link
3 CVEs2 on KEV0 new
MR8.8
Multiple Routers
TP-Link
2 CVEs2 on KEV0 new
TF7.5
Tl-wr741nd Firmware
Tp-link
2 CVEs2 on KEV0 new
TF9.8
Tl-wr840n Firmware
Tp-link
22 CVEs1 on KEV0 new
TF8.8
Tl-wr941nd Firmware
Tp-link
7 CVEs1 on KEV0 new
AA9.8
Archer Ax21 Firmware
Tp-link
6 CVEs1 on KEV0 new
TF9.8
Tl-wr902ac Firmware
Tp-link
6 CVEs1 on KEV0 new
TL8.8
TL-WR841N
TP-Link
5 CVEs1 on KEV0 new
AA8.8
Archer AX21
TP-Link
3 CVEs1 on KEV0 new
AC8.8
Archer C9 Firmware
Tp-link
3 CVEs1 on KEV0 new
TL6.5
TL-WDR4300
TP-Link
3 CVEs1 on KEV0 new
TF9.8
Tl-wr710n Firmware
Tp-link
3 CVEs1 on KEV0 new
MF9.8
Mr3420 Firmware
Tp-link
2 CVEs1 on KEV0 new
MF9.8
Mr6400 Firmware
Tp-link
2 CVEs1 on KEV0 new
TF9.8
Tl-mr3020 Firmware
Tp-link
2 CVEs1 on KEV0 new
TF6.5
Tl-mr3220 Firmware
Tp-link
2 CVEs1 on KEV0 new
TF8.8
Tl-wa855re Firmware
Tp-link
2 CVEs1 on KEV0 new
TF8.8
Tl-wdr3500 Firmware
Tp-link
2 CVEs1 on KEV0 new
TL6.5
TL-WR740N
TP-Link
2 CVEs1 on KEV0 new
TF7.7
Tl-wr743nd Firmware
Tp-link
2 CVEs1 on KEV0 new
TL8.8
TL-WR840N
TP-Link
2 CVEs1 on KEV0 new
TL6.5
TL-WR841ND
TP-Link
2 CVEs1 on KEV0 new
TL8.0
TL-WR941ND
TP-Link
2 CVEs1 on KEV0 new
WF9.8
Wa701nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wa801nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wa901nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wdr3500 Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr1043nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr1045nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr749n Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr802n Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr841hp Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr842n Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr842nd Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr845n Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr941hp Firmware
Tp-link
2 CVEs1 on KEV0 new
WF9.8
Wr945n Firmware
Tp-link
2 CVEs1 on KEV0 new
AC6.5
Archer C1900 Firmware
Tp-link
1 CVEs1 on KEV0 new
AC6.5
Archer C5
TP-Link
1 CVEs1 on KEV0 new
AC6.5
Archer C7
TP-Link
1 CVEs1 on KEV0 new
AC7.5
Archer C8 Firmware
Tp-link
1 CVEs1 on KEV0 new
MA7.5
Multiple Archer Devices
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-MR3420
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-MR6400
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WA801ND
TP-Link
1 CVEs1 on KEV0 new
TL8.8
TL-WA855RE
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WA901ND
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WDR3500
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WDR3600
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WR1043ND
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WR1045ND
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WR741ND
TP-Link
1 CVEs1 on KEV0 new
TL6.5
TL-WR749N
TP-Link
1 CVEs1 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-19683 | EF Er605w Firmware Tp-link | 7.4 | Aug 20 | Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways |
| CVE-2026-19586 | EF Er706w-4g Firmware Tp-link | 9.8 | Aug 20 | Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways |
| CVE-2026-9033 | DF Dr3150 Firmware Tp-link | 4.3 | Aug 20 | Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways |
| CVE-2026-8619 | TF Tl-mr150 Firmware Tp-link | 7.5 | Aug 19 | Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600 |
| CVE-2026-75616 | AC Archer C20 Firmware Tp-link | 6.8 | Aug 19 | Command Injection in Router Web Management Interface |
| CVE-2026-75619 | TC Tapo C101 Firmware Tp-link | 5.7 | Aug 19 | RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101 |
| CVE-2026-75618 | TC Tapo C100 Firmware Tp-link | 6.5 | Aug 19 | RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101 |
| CVE-2026-15316 | TC Tapo C200 Firmware Tp-link | 6.5 | Aug 18 | Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200 |
| CVE-2026-15315 | TC Tapo C200 Firmware Tp-link | 8.8 | Aug 18 | Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200 |
| CVE-2026-15141 | TF Tl-wr820n Firmware Tp-link | 5.7 | Aug 12 | Referer Validation Bypass in TL-WR820N Web Management Interface |
| CVE-2026-15314 | TP Tapo P110 Firmware Tp-link | 7.5 | Aug 4 | Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110 |
| CVE-2025-15631 | OS Omada Sg3210 Firmware Tp-link | 5.9 | Aug 3 | Weak Credential Storage in TP-Link Omada Devices |
| CVE-2025-15630 | OS Omada Sg6654x Firmware Tp-link | 5.9 | Aug 3 | Device Provisioning Race Condition in TP-Link Omada Adoption Workflow |
| CVE-2025-15629 | OS Omada Sg2452lp Firmware Tp-link | 7.5 | Aug 3 | Weak Session Key Generation in TP-Link Omada Adoption Protocol |
| CVE-2025-15628 | OE Omada Es210gp Firmware Tp-link | 7.5 | Aug 3 | Hardcoded Certificates in TP-Link Omada Device Communications |
| CVE-2025-15627 | OD Omada Ds106gpp Firmware Tp-link | 7.5 | Aug 3 | Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication |
| CVE-2025-15544 | OS Omada Sg6428x Firmware Tp-link | 5.9 | Aug 3 | Weak Credential Protection During TP-Link Omada Device Adoption |
| CVE-2025-9291 | OS Omada Sg2218 Firmware Tp-link | 6.5 | Aug 3 | Improper Certificate Validation in TP-Link Omada Cloud Communications |
| CVE-2026-9044 | AA Archer Axe75 Firmware Tp-link | 8.0 | Jul 31 | Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75 |
| CVE-2026-13230 | KE Kasa Ec71 Firmware Tp-link | 6.5 | Jul 15 | Information Disclosure Vulnerability in Local Discovery Response in TP-Link Kasa EC70 and EC71 |
| CVE-2026-9770 | KE Kasa Ec71 Firmware Tp-link | 5.3 | Jul 15 | Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71 |
| CVE-2026-5040 | DM Deco M5 Firmware Tp-link | 6.7 | Jul 14 | Weak Password Hashing Mechanism in TP-Link Deco M5 |
| CVE-2026-15429 | AV Archer Vx1800v Firmware Tp-link | 8.8 | Jul 14 | Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800v |
| CVE-2026-15428 | AV Archer Vx1800v Firmware Tp-link | 8.8 | Jul 14 | OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v |
| CVE-2026-15427 | AV Archer Vx1800v Firmware Tp-link | 8.1 | Jul 14 | OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v |
| CVE-2026-9105 | TF Tl-wr841n Firmware Tp-link | 6.5 | Jun 29 | Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web Interface |
| CVE-2026-12760 | TC Tapo C200 Firmware Tp-link | 6.5 | Jun 24 | Denial-of-Service Vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C200 |
| CVE-2026-11409 | TF Tl-wr940n Firmware Tp-link | 7.2 | Jun 16 | OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N |
| CVE-2026-11410 | TF Tl-wr940n Firmware Tp-link | 7.2 | Jun 16 | OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N |
| CVE-2026-6250 | TC Tapo C110 Firmware Tp-link | 8.1 | Jun 11 | Authenticated Format String Injection on TP-Link Tapo C110 |
| CVE-2026-8714 | TC Tapo C520ws Firmware Tp-link | 6.5 | Jun 5 | Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS |
| CVE-2026-1871 | TC Tapo C200 Firmware Tp-link | 6.5 | Jun 2 | Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200 |
| CVE-2026-34127 | TF Tl-sg108pe Firmware Tp-link | 4.8 | May 29 | Stored Cross-Site Scripting (XSS) via Configuration File Import on TP-Link's TL-SG108PE |
| CVE-2026-34126 | TL Tapo L535e Firmware Tp-link | 7.5 | May 28 | Bluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100C |
| CVE-2026-8697 | AC Archer C64 Firmware Tp-link | 8.8 | May 28 | Improper Authentication Rate Limiting on TP-Link's Archer C64 |
| CVE-2026-5509 | AB Archer Be7200 Firmware Tp-link | 7.2 | May 27 | Arbitrary Command Injection via Browser Developer Console in TP-Link Archer BE450 and BE7200 |
| CVE-2026-3294 | TF Tl-wa860re Firmware Tp-link | 8.8 | May 22 | Authentication Logic Vulnerability on Multiple TP-Link Range Extenders |
| CVE-2026-5511 | AA Archer Ax72 Firmware Tp-link | 2.7 | May 19 | Information Disclosure via Diagnostic Interface Due to Improper Input Validation on TP-Link's Archer AX72 |
| CVE-2018-25321 | TW TL-WR720NMbps Wireless N Router Tp-link | 4.3 | May 17 | TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719) |
| CVE-2026-5039 | TF Tl-wr841n Firmware Tp-link | 8.8 | Apr 23 | Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N |
| CVE-2026-5363 | AC Archer C7 Firmware Tp-link | 8.8 | Apr 15 | Use of weak cryptographic key in TP-Link Archer C7 |
| CVE-2026-30818 | AA Archer Ax53 Firmware Tp-link | 8.0 | Apr 8 | OS Command Injection Vulnerability in dnsmasq Module in TP-Link AX53 |
| CVE-2026-30817 | AA Archer Ax53 Firmware Tp-link | 5.7 | Apr 8 | Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53 |
| CVE-2026-30816 | AA Archer Ax53 Firmware Tp-link | 5.7 | Apr 8 | Arbitrary File Reading Vulnerability in OpenVPN Module in TP-Link AX53 |
| CVE-2026-30815 | AA Archer Ax53 Firmware Tp-link | 8.0 | Apr 8 | OS Command Injection Vulnerability in OpenVPN Module in TP-Link AX53 |
| CVE-2026-30814 | AA Archer Ax53 Firmware Tp-link | 8.0 | Apr 8 | Buffer Overflow Vulnerability in TP-Link AX53 |
| CVE-2026-34124 | TC Tapo C520ws Firmware Tp-link | 6.5 | Apr 2 | Denial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WS |
| CVE-2026-34122 | TC Tapo C520ws Firmware Tp-link | 6.5 | Apr 2 | Stack-based Buffer Overflow Leading to Denial of Service in TP-Link Tapo C520WS |
| CVE-2026-34121 | TC Tapo C520ws Firmware Tp-link | 8.8 | Apr 2 | Authentication Bypass in DS Configuration Service via HTTP Request Parsing Differential of TP-Link Tapo C520WS |
| CVE-2026-34120 | TC Tapo C520ws Firmware Tp-link | 6.5 | Apr 2 | Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS |
| CVE-2026-34119 | TC Tapo C520ws Firmware Tp-link | 6.5 | Apr 2 | Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS |
| CVE-2026-34118 | TC Tapo C520ws Firmware Tp-link | 6.5 | Apr 2 | Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C100, C101, C210 & C520WS |
| CVE-2026-4346 | TF Tl-wr850n Firmware Tp-link | 6.8 | Mar 26 | Cleartext Storage of Administrative and Wi-Fi Credentials via Accessible Serial Interface in TP Link's TL-WR850N |
| CVE-2026-3622 | TF Tl-wr841n Firmware Tp-link | 7.5 | Mar 26 | Denial-of-Service Vulnerability in UPnP Component of TP Link's TL-WR841N |
| CVE-2025-15606 | TF Td-w8961nd Firmware Tp-link | 7.5 | Mar 23 | Denial of Service (DoS) in HTTPD Input Handling on TP-Link TD-W8961N |
| CVE-2025-15605 | AN Archer Nx500 Firmware Tp-link | 7.3 | Mar 23 | Hardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 |
| CVE-2025-15519 | AN Archer Nx200 Firmware Tp-link | 7.2 | Mar 23 | Command Injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX600 |
| CVE-2025-15518 | AN Archer Nx600 Firmware Tp-link | 7.2 | Mar 23 | Command Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX600 |
| CVE-2025-15517 | AN Archer Nx200 Firmware Tp-link | 8.1 | Mar 23 | Authorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX600 |
| CVE-2025-15608 | AA Archer Ax53 Firmware Tp-link | 9.8 | Mar 20 | Buffer Overflow in Network Probe Handling Function of TP-Link Archer AX53 + Archer AX55 |
