CyberSIXT Search
Vendor

TP-Link

CVEs tracked · all time
47
in CISA KEV · all time
3
articles · since 11 Sep
6
articles · all time
35

6 articles since 11 Sep.

Show as table
TP-Link: articles per day
Day (UTC)Articles
Wed 16 Sep1
Fri 2 Oct1
Tue 6 Oct1
Thu 8 Oct1
Fri 9 Oct2
See the full timeline
Products: Archer AX21, Archer AX55 v4, Archer AX75 V1, Archer AX90 v1 and 165 more
Archer AX21Archer AX55 v4Archer AX75 V1Archer AX90 v1Archer BE3600 V1Archer BE450 v1Archer BE7200 V1Archer BE800 V1Archer C20 v5Archer C20 v6Archer MR200 v07Archer MR200 v8Archer MR402 v1Archer MR600 v5Archer VR2100 v1AXE75 V1Deco M9 Plus V2DR3150 v1DR3220v-4G v1DR3650v v1DR3650v-4G v1EB210 Pro(EU1) 1.0EB210 Pro(US1) 1.0EB810v(EU1) V1.0EC220-G5(BR) V3.0EC220-G5(EU1) V3.0EC220-G5(US1) V3.0EC225-G5(BR) V1.0EC225-G5(EU1) V1.0EC225-G5(US1) V1.0EP10EP25 V2EP40AEP40MER603WP-4G-Outdoor v1ER605 v2ER605W v2ER701-5G-Outdoor v1ER703WP-4G-Outdoor v1ER706W v1ER706W-4G v1ER706W-4G v2ER706WP-4G v1ER707-M2 v1ER7206 v2ER7212PC v2ER7406 v1ER7412-M2 v1ER8411 v1ES20MEX141(BR) V1.0/1.9EX141(EU1) V1.0EX141(US1) V1.0EX220(BR) V1.0/1.20/1.28/1.29/1.8EX220(BR) V2.0EX220(EU1) V1.0/1.20EX220(RU) V1.0EX220(US1) V1.0EX222(EU1) V1.0EX222(KR) V1.0EX222(US1) V1.0EX511(BR) V2.0/2.8/2.9EX511(EU1) V2.0EX511(US1) V2.0EX520(US1) V1.0EX520v(EU1)1.0EX521(US1) V1.0EX820v(EU1) V1.0EX920(US2) V1.6/V1.0HB210 Pro(EU1)1.0HB210 Pro(US2)1.0/1.6HB210(EU1) 1.0HB210(US2) 1.0HB410( EU1) 1.0HB610(CA) V2.0HB610(EU1)HB610(US2) V2.6/2.0HB710(EU1) 1.0HB710(US2) V1.6/1.0HB810(EU1) V2.0HB810(US2) V1.0/1.6/2.0/2.6HC220-G5(BR) V1.30HC220-G5(EU1) V1.20/1.0HC220-G5(US1) V1.0/1.6HS103P3 / HS103P4 v5HS200 V5.26HS220 V3.26HS220-LA(US) 4.6 / HS220-BL(US) 4.6HS220-LA(US) 6.6 / HS220-BL(US) 6.6HS300 V2HX141(EU1) V1.0HX220(AU) V1.0HX220(CA) V1.0HX220(EU1) V1.0HX220(US1) V1.0/1.0HX510(AU) V1.0/2.0HX510(CA) V1.0/2.0HX510(EU1) V2.0HX510(US1) V2.0HX510(US2) 2.6HX710 Pro(EU1) V1.0HX710(EU1) V1.0Kasa EC70 v4Kasa EC71 v4KL125KP115KP125MP2 / KP125MP4KP200 V3KP303 V2KS205KS220MKS225KS240Multiple RoutersTapo C120 v1Tapo C200 v5Tapo C325WB v2Tapo D100C v1.0Tapo L535E v1.0, v3.0Tapo P300 v1.0TL-MR6400 v7TL-MR6400 v7.0TL-WR841NTL-WR940N v6v1VIGI C230I MiniVIGI C240 1.0VIGI C250VIGI C340 2.0VIGI C340-W 2.x Series (C340-W 2.0/C340-W 2.20)VIGI C340SVIGI C440 2.0VIGI C440-W 2.0VIGI C540 2.0VIGI C540-4GVIGI C540-W 2.0VIGI C540S / EasyCam C540SVIGI C540VVIGI Cx20 Series (C320/C420)VIGI Cx20I 1.0 Series (C220I 1.0/C320I 1.0/C420I 1.0)VIGI Cx20I 1.20 Series (C220I 1.20/C320I 1.20/C420I 1.20)VIGI Cx30 1.0 Series (C230 1.0/C330 1.0/C430 1.0)VIGI Cx30 1.20 Series (C230 1.20/C330 1.20/C430 1.20)VIGI Cx30I 1.0 Series (C230I 1.0/C330I 1.0/C430I 1.0)VIGI Cx30I 1.20 Series (C230I 1.20/C330I 1.20/C430I 1.20)VIGI Cx40I 1.0 Series (C240I 1.0/C340I 1.0/C440I 1.0)VIGI Cx40I 1.20 Series (C240I 1.20/C340I 1.20/C440I 1.20)VIGI Cx45 Series (C345/C445)VIGI Cx50 Series (C350/C450)VIGI Cx55 Series (C355/C455)VIGI Cx85 Series (C385/C485)VIGI InSight S345-4GVIGI InSight S655IVIGI InSight Sx25 Series (S225/S325/S425)VIGI InSight Sx45 Series (S245/S345/S445)VIGI InSight Sx45ZI Series (S245ZI/S345ZI/S445ZI)VIGI InSight Sx55 Series (S355/S455)VIGI InSight Sx85 Series (S285/S385)VIGI InSight Sx85PI Series (S385PI/S485PI)VX1800v(EU1) V1.0VX420-G2h(AU) V3.0VX800v(DE) V1.0XC220-G3v(EU1) V2.30XC220-G3v(US1) V2.30XX230v(BR) V1.0XX530v(BR)v1.0XX530v(BR)v2.0XX530v(EU1)XX530v(US1)

CVEs

47 CVEs, the 40 listed known exploited first
CVE-2023-1389TP-Link Archer AX-21 Command Injection VulnerabilityCVSS8.8HighExploited99.9%EPSS4articles
CVE-2023-33538TP-Link Multiple Routers Command Injection VulnerabilityCVSS8.8HighExploited42%EPSS2articles
CVE-2023-50224TP-Link TL-WR841N Authentication Bypass by Spoofing VulnerabilityCVSS6.5MediumExploited20%EPSS3articles
CVE-2025-30237Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet DevicesCVSS8.7High–Not in KEV0.3%EPSS3articles
CVE-2025-30241OS Command Injection in Web Interface in Multiple TP-Link Aginet DevicesCVSS8.6High–Not in KEV0.4%EPSS3articles
CVE-2025-30238Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet DevicesCVSS8.6High–Not in KEV0.2%EPSS3articles
CVE-2025-30239Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet DevicesCVSS8.5High–Not in KEV0.2%EPSS3articles
CVE-2025-30240Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet DevicesCVSS5.1Medium–Not in KEV0.2%EPSS3articles
CVE-2026-105674TP-Link Systems Inc. Tapo C325WB v2 vulnerabilityCVSS8.7High–Not in KEV0.3%EPSS1article
CVE-2026-105672TP-Link Systems Inc. Tapo C325WB v2 vulnerabilityCVSS8.7High–Not in KEV0.3%EPSS1article
CVE-2026-105673TP-Link Systems Inc. Tapo C325WB v2 vulnerabilityCVSS7.1High–Not in KEV0.3%EPSS1article
CVE-2026-102369TP-Link Systems Inc. Tapo C200 v5 vulnerabilityCVSS8.7High–Not in KEV0.3%EPSS1article
28 more CVEs
CVE-2026-102294TP-Link System Inc. TL-WR841N v14 vulnerabilityCVSS8.5High–Not in KEV0.9%EPSS1article
CVE-2026-8618TP-Link Systems Inc. Deco M9 Plus V2 vulnerabilityCVSS7.7High–Not in KEV0.3%EPSS1article
CVE-2026-84682TP-Link Systems Inc. Archer AX90 v1 vulnerabilityCVSS7.7High–Not in KEV1.2%EPSS1article
CVE-2026-78578TP-Link Systems Inc. Tapo C200 v5 vulnerabilityCVSS7.1High–Not in KEV0.3%EPSS1article
CVE-2026-9032TP-Link Systems Inc. Tapo C200 V5 vulnerabilityCVSS7.1High–Not in KEV0.2%EPSS1article
CVE-2026-78577TP-Link Systems Inc. Tapo C200 v5 vulnerabilityCVSS5.3Medium–Not in KEV0.2%EPSS1article
CVE-2026-15315TP-Link Systems Inc. Tapo C200 v5 vulnerabilityCVSS8.7High–Not in KEV0.5%EPSS1article
CVE-2026-15316TP-Link Systems Inc. Tapo C200 v5 vulnerabilityCVSS7.1High–Not in KEV0.3%EPSS1article
CVE-2026-0629TP-Link Systems Inc. VIGI InSight Sx45 Series (S245/S345/S445) vulnerabilityCVSS8.7High–Not in KEV0.4%EPSS1article
CVE-2026-18167TP-Link Systems Inc. Archer AX55 v4 vulnerabilityCVSS7.7High–Not in KEV0.3%EPSS1article
CVE-2026-18330TP-Link Systems Inc. Archer AX55 v4 vulnerabilityCVSS6.1Medium–Not in KEV0.3%EPSS1article
CVE-2026-76784TP-Link Systems Inc. HS103P3 / HS103P4 v5 vulnerabilityCVSS8.7High–Not in KEV0.2%EPSS1article
CVE-2026-9254TP-Link Systems Inc. Archer BE800 V1 vulnerabilityCVSS8.7High–Not in KEV3.1%EPSS1article
CVE-2026-16348TP-Link Systems Inc. Archer BE800 v1 vulnerabilityCVSS8.5High–Not in KEV2.1%EPSS1article
CVE-2026-78541TP-Link Systems Inc. Archer BE3600 v1 vulnerabilityCVSS8.5High–Not in KEV2.3%EPSS1article
CVE-2026-75616TP-Link Systems Inc. Archer C20 v6 vulnerabilityCVSS8.5High–Not in KEV2.8%EPSS1article
CVE-2026-17250TP-Link Systems Inc. TL-MR6400 v7.0 vulnerabilityCVSS8.5High–Not in KEV0.3%EPSS1article
CVE-2026-17252TP-Link Systems Inc. TL-MR6400 v7.0 vulnerabilityCVSS7.1High–Not in KEV0.3%EPSS1article
CVE-2026-17251TP-Link Systems Inc. TL-MR6400 v7.0 vulnerabilityCVSS7.1High–Not in KEV0.5%EPSS1article
CVE-2026-19586TP-Link Systems Inc. ER7212PC v2 vulnerabilityCVSS9.3Critical–Not in KEV5.7%EPSS1article
CVE-2026-19683TP-Link Systems Inc. ER7212PC v2 vulnerabilityCVSS6.3Medium–Not in KEV0.3%EPSS1article
CVE-2026-9033TP-Link Systems Inc. ER7212PC v2 vulnerabilityCVSS6.0Medium–Not in KEV0.3%EPSS1article
CVE-2026-9044TP-Link Systems Inc. AXE75 V1 vulnerabilityCVSS8.5High–Not in KEV2.5%EPSS1article
CVE-2026-12935TP-Link Systems Inc. TL-WR940N v6 vulnerabilityCVSS8.7High–Not in KEV1.0%EPSS1article
CVE-2026-9770TP-Link Systems Inc. Kasa EC71 v4 vulnerabilityCVSS8.6High–Not in KEV0.3%EPSS1article
CVE-2026-13230TP-Link Systems Inc. Kasa EC71 v4 vulnerabilityCVSS5.3Medium–Not in KEV0.4%EPSS1article
CVE-2026-11834TP-Link Systems Inc. Archer MR200 v07 vulnerabilityCVSS8.7High–Not in KEV0.7%EPSS1article
CVE-2026-8913TP-Link Systems Inc. Archer MR600 v5 vulnerabilityCVSS8.5High–Not in KEV2.1%EPSS1article

Coverage

35 articles, all timeFull timeline RSS feed
  1. Four More US States Sue TP-Link Over Router Security ClaimsThe Hacker News
  2. TP-Link Patches Tapo Cameras Flaws That Could Let Attackers Hijack Video StreamsSecurityOnline
  3. Four US States Sue TP-Link Over Security Claims and Router FlawsSecurityWeek
  4. ClingSTUN Turns Unpatched Routers and Cameras Into Stealthy ProxiesSecurityOnline
  5. TP-Link Patches Camera Flaws Allowing Unauthenticated Command ExecutionSecurityOnline
  6. TP-Link Tapo C200 Flaws Expose Camera Feeds to Network AttackersInfosecurity
  7. OpenAI Reveals AI Agents Used Public Wiki to Evade ControlsSecurityOnline
  8. TP-Link Patches Archer AX55 Flaws Enabling Code Execution and Password TheftSecurityOnline
  9. Critical CVE-2026-76784 bug exposes TP Link Kasa devicesSecurityOnline
  10. CVE-2026-9254: Unauthenticated OS Command Injection Hits TP-Link ArcherSecurityOnline
  11. CVE-2026-75616: TP-Link Archer C20 Command Injection Risks Full Device CompromiseSecurityOnline
  12. TP Link patches three flaws in TL MR6400 routers, urges updateSecurityOnline
  13. CVE-2026-19586 (CVSS 9.3): Pre-Authentication OS Command Injection Hits Omada GatewaysSecurityOnline
  14. TP-Link Patches 5 Flaws in ISP-Managed Routers and Mesh DevicesSecurityOnline
  15. CVE-2026-9044: TP-Link Command Injection Hits Archer AXE75SecurityOnline
  16. TPLink fixes CVE-2026-12935 bug in TLWR940N routersSecurityOnline
  17. TP‑Link Kasa cameras hit by hardcoded key and location leak flawsSecurityOnline
  18. CVSS 8.7 Unauthenticated RCE Impacts Multiple TP-Link RoutersSecurityOnline
  19. Critical Flaws Hit LiteLLM Check Point and TP Link DevicesSecurityOnline
  20. TP-Link Patches Critical Setup Flaw Across Multiple Tapo Smart DevicesSecurityOnline
  21. Critical CVE-2026-5509 flaw hits TP Link Archer routersSecurityOnline
  22. Anti-DDoS Firm Heaped Attacks on Brazilian ISPsKrebs on Security
  23. Mirai Botnet Hijacks Old DLink Routers Via CVE-2025-29635Security Affairs
  24. CVE-2023-33538 under attack for a year, but exploitation still unsuccessfulSecurity Affairs
  25. Hackers Probe TP Link Routers for CVE-2023-33538, No Success YetSecurityWeek
  26. Nexcorium hijacks TBK DVRs via CVE-2024-3721 for DDoS botnetThe Hacker News
  27. Trend Micro Exposes Fancy Bears Prismex Malware Targeting UkraineDark Reading
  28. APT28 hijacks routers worldwide in DNS based FrostArmada campaignThe Hacker News
  29. APT28 exploits SOHO routers via CVE‑2023‑50224 to steal credentialsInfosecurity
  30. TP-Link Patches High-Severity Router VulnerabilitiesSecurityWeek
  31. Patch now: TP-Link Archer NX routers vulnerable to firmware takeoverSecurity Affairs
  32. RondoDox botnet expands arsenal targeting 174 flaws, and hits 15,000 daily exploit attemptsSecurity Affairs
  33. Rooted via Wi-Fi 7: TP-Link Patches Command Injection in Archer BE230SecurityOnline
  34. High-Severity IDOR Flaw Lets Admins Hijack TP-Link Omada Owner AccountsSecurityOnline
  35. Router Takeover: High-Severity Command Injection Flaw Hits TP-Link Archer MR600SecurityOnline · first in our coverage

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device