TP-Link known exploited vulnerabilities
Every TP-Link CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 6 in all, 0 added in the last 12 months.
No KEV entries match.
Get alerts for new known exploited vulnerabilities
Only want the packages you use? Check a lockfile to get a feed for your stack.
https://cve.now/kev/feed
Paste into Feedly or any RSS reader, or run /feed subscribe https://cve.now/kev/feed in Slack. For email alerts, give it to an RSS-to-email service.
https://cve.now/kev/feed?format=atom
The same entries as Atom, for readers that prefer it.
https://cve.now/kev/feed?format=json
The same entries as JSON Feed 1.1, for scripts and readers that support it.
https://cve.now/api/v1/entries?filter=kev
Pages of 30 entries, newest first. Pass the response's next_cursor as cursor for the next page.
Frequently asked questions
How many TP-Link vulnerabilities are in CISA KEV?
6 TP-Link vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 0 of them added in the last 12 months. The newest is CVE-2025-9377 (TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability), added 2025-09-03.
Which TP-Link products are in CISA KEV?
5 products, including Multiple Routers, TL-WR841N, TL-WA855RE. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are TP-Link KEV vulnerabilities used by ransomware?
CISA has no known ransomware use on record for TP-Link's KEV entries.