Skip to content
Tp-link Firmware vulnerabilities
-
merit lilin v1, tp-link dr3150 firmware, dr3220v-4g firmware +34 more +36 more
Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways
CVE-2026-19683
6.3 Medium
-
merit lilin v1, tp-link dr3150 firmware, dr3220v-4g firmware +34 more +36 more
Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways
CVE-2026-19586
Public exploit
9.3 Critical
-
tp-link dr3150 firmware, dr3220v-4g firmware, dr3650v-4g firmware +34 more +36 more
Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways
CVE-2026-9033
6.0 Medium
-
tp-link systems inc archer mr600 v2, tp-link systems inc. tl-mr100 v3.2, tl-mr6400 v8.0 +5 more +7 more
Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600
CVE-2026-8619
7.1 High
-
tp-link systems inc. archer c20 v6, tp-link archer c20 firmware +1 more
Command Injection in Router Web Management Interface
CVE-2026-75616
Public exploit
8.5 High
-
tp-link tapo c100 firmware, tapo c101 firmware, tp-link systems inc. tapo c100 v5 +1 more +3 more
RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101
CVE-2026-75619
6.9 Medium
-
tp-link tapo c100 firmware, tapo c101 firmware, tp-link systems inc. tapo c100 v5 +1 more +3 more
RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101
CVE-2026-75618
7.1 High
-
tp-link systems inc. tapo c200 v5, tp-link tapo c200 firmware +1 more
Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200
CVE-2026-15316
7.1 High
-
tp-link systems inc tapo c120 v1, tp-link tapo c120 firmware, tapo c200 firmware +1 more +3 more
Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200
CVE-2026-15315
Public exploit
8.7 High
-
tp-link tl-wr820n firmware, tp-link systems inc. tl-wr820n v2 +1 more
Referer Validation Bypass in TL-WR820N Web Management Interface
CVE-2026-15141
5.3 Medium
-
tp-link systems inc. p110 v1, tp-link tapo p110 firmware +1 more
Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110
CVE-2026-15314
7.1 High
-
tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +110 more +112 more
Weak Credential Storage in TP-Link Omada Devices
CVE-2025-15631
5.7 Medium
-
tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +113 more +115 more
Device Provisioning Race Condition in TP-Link Omada Adoption Workflow
CVE-2025-15630
5.8 Medium
-
tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +113 more +115 more
Weak Session Key Generation in TP-Link Omada Adoption Protocol
CVE-2025-15629
6.9 Medium
-
tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +114 more +116 more
Hardcoded Certificates in TP-Link Omada Device Communications
CVE-2025-15628
8.2 High
-
tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +113 more +115 more
Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication
CVE-2025-15627
6.9 Medium
-
tp-link omada, tp link systems inc. omada access points, omada app +116 more +118 more
Weak Credential Protection During TP-Link Omada Device Adoption
CVE-2025-15544
6.9 Medium
-
tp-link omada ds1008x firmware, omada ds1016g firmware, omada ds1016ge firmware +109 more +111 more
Improper Certificate Validation in TP-Link Omada Cloud Communications
CVE-2025-9291
7.7 High
-
tp-link systems inc. axe75 v1, tp-link archer axe75 firmware +1 more
Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75
CVE-2026-9044
8.5 High
-
tp-link systems inc. kasa ec70 v4, tp-link kasa ec70 firmware, kasa ec71 firmware +1 more +3 more
Information Disclosure Vulnerability in Local Discovery Response in TP-Link Kasa EC70 and EC71
CVE-2026-13230
5.3 Medium
-
tp-link systems inc. kasa ec71 v4, tp-link kasa ec70 firmware, kasa ec71 firmware +1 more +3 more
Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71
CVE-2026-9770
8.6 High
-
tp-link deco m5 firmware, tp-link systems inc. deco m5 deco m5 v1 +1 more
Weak Password Hashing Mechanism in TP-Link Deco M5
CVE-2026-5040
7.1 High
-
tp-link systems inc. archer vx1800v v1, tp-link archer vx1800v firmware +1 more
Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800v
CVE-2026-15429
5.1 Medium
-
tp-link archer vx1800v firmware, tp-link systems inc. archer vx1800v v1 +1 more
OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v
CVE-2026-15428
8.5 High
-
tp-link systems inc. archer vx1800v v1, tp-link archer vx1800v firmware +1 more
OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v
CVE-2026-15427
8.6 High
-
tp-link systems inc. tl-wr841n v14, tp-link tl-wr841n firmware +1 more
Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web Interface
CVE-2026-9105
6.8 Medium
-
tp-link systems inc. tapo c200 v3, tp-link tapo c200 firmware +1 more
Denial-of-Service Vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C200
CVE-2026-12760
7.1 High
-
tp-link system inc. tl-wr940n v6, tp-link tl-wr940n firmware +1 more
OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N
CVE-2026-11409
8.5 High
-
tp-link system inc. tl-wr940n v6, tp-link tl-wr940n firmware +1 more
OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N
CVE-2026-11410
8.5 High
-
tp-link tapo c110 firmware, tp-link systems inc. tapo c110 v2 +1 more
Authenticated Format String Injection on TP-Link Tapo C110
CVE-2026-6250
7.0 High
-
tp-link systems inc. tapo c520ws v2, tp-link tapo c520ws firmware +1 more
Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS
CVE-2026-8714
7.1 High
-
tp-link systems inc. tapo c200 v5, tp-link tapo c200 firmware +1 more
Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200
CVE-2026-1871
7.1 High
-
tp-link systems inc. tl-sg108pe v5, tp-link tl-sg108pe firmware +1 more
Stored Cross-Site Scripting (XSS) via Configuration File Import on TP-Link's TL-SG108PE
CVE-2026-34127
5.3 Medium
-
tp link systems inc. tapo d100c v1.0, tp-link systems inc. tapo p300 v1.0, tp-link tapo d100c firmware +3 more +5 more
Bluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100C
CVE-2026-34126
7.3 High
-
tp-link archer c64 firmware, tp-link systems inc. archer c64 v1.0 +1 more
Improper Authentication Rate Limiting on TP-Link's Archer C64
CVE-2026-8697
Public exploit
8.7 High
-
tp-link systems inc. archer be450 v1, tp-link archer be450 firmware, archer be7200 firmware +1 more +3 more
Arbitrary Command Injection via Browser Developer Console in TP-Link Archer BE450 and BE7200
CVE-2026-5509
8.5 High
-
tp link systems inc. archer re360 v1, tp-link re305 firmware, re360 firmware +7 more +9 more
Authentication Logic Vulnerability on Multiple TP-Link Range Extenders
CVE-2026-3294
8.7 High
-
tp-link archer ax72 firmware, tp-link systems inc. archer ax72 (sg) v1.0 +1 more
Information Disclosure via Diagnostic Interface Due to Improper Input Validation on TP-Link's Archer AX72
CVE-2026-5511
4.6 Medium
-
tp-link tl-wr720n firmware, tl-wr720nmbps wireless n router +1 more
TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)
CVE-2018-25321
5.3 Medium
-
tp-link tl-wr841n firmware, tp-link systems inc. tl-wl841n v13 +1 more
Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N
CVE-2026-5039
6.1 Medium
-
tp-link systems inc. archer c7 v5 and v5.8, tp-link archer c7 firmware +1 more
Use of weak cryptographic key in TP-Link Archer C7
CVE-2026-5363
5.4 Medium
-
tp-link systems inc. ax53 v1.0, tp-link archer ax53 firmware +1 more
OS Command Injection Vulnerability in dnsmasq Module in TP-Link AX53
CVE-2026-30818
8.5 High
-
tp-link systems inc. ax53 v1.0, tp-link archer ax53 firmware +1 more
Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53
CVE-2026-30817
6.8 Medium
-
tp-link systems inc. ax53 v1.0, tp-link archer ax53 firmware +1 more
Arbitrary File Reading Vulnerability in OpenVPN Module in TP-Link AX53
CVE-2026-30816
6.8 Medium
-
tp-link systems inc. ax53 v1.0, tp-link archer ax53 firmware +1 more
OS Command Injection Vulnerability in OpenVPN Module in TP-Link AX53
CVE-2026-30815
8.5 High
-
tp-link systems inc. ax53 v1.0, tp-link archer ax53 firmware +1 more
Buffer Overflow Vulnerability in TP-Link AX53
CVE-2026-30814
7.3 High
-
tp-link systems inc. tapo c520ws v2.6, tp-link tapo c520ws firmware +1 more
Denial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WS
CVE-2026-34124
7.1 High
-
tp-link systems inc. tapo c520ws v2.6, tp-link tapo c520ws firmware +1 more
Stack-based Buffer Overflow Leading to Denial of Service in TP-Link Tapo C520WS
CVE-2026-34122
7.1 High
-
tp-link systems inc. tapo c520ws v2.6, tp link systems inc. tapo c210 v3.6, tp-link tapo c520ws firmware +2 more
Authentication Bypass in DS Configuration Service via HTTP Request Parsing Differential of TP-Link Tapo C520WS and C210
CVE-2026-34121
8.7 High
-
tp-link systems inc. tapo c520ws v2.6, tp-link tapo c520ws firmware +1 more
Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS
CVE-2026-34120
7.1 High
- Show olderLoading…