TP-Link vulnerabilities
114 CVEs and advisories name TP-Link as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-25321TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)
- CVE-2025-40634Stack-based buffer overflow in TP-Link Archer AX50
- CVE-2025-32107OS command injection vulnerability exists in Deco BE65 Pro firmware versions prior to "Deco BE65 Pro(JP)_V1_1.1.2 Build 20250123".
- CVE-2025-3442Information Disclosure Vulnerability in TP-Link Tapo IoT Smart Hub
- CVE-2025-1099Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera
- CVE-2025-0730TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings
- CVE-2025-0729TP-Link TL-SG108E clickjacking
- CVE-2024-12344TP-Link VN020 F3v(T) FTP USER Command memory corruption
- CVE-2024-12343TP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflow
- CVE-2024-12342TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service
- CVE-2024-54127Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50
- CVE-2024-54126Insufficient Integrity Verification Vulnerability in TP-Link Archer C50
- CVE-2024-11237TP-Link VN020 F3v(T) DHCP DISCOVER Packet Parser TP-Thumper stack-based overflow
- CVE-2024-10523Information Disclosure Vulnerability in TP-Link IoT Smart Hub
- CVE-2024-9284TP-LINK TL-WR841ND popupSiteSurveyRpm.htm stack-based overflow
- CVE-2024-4224TP-Link TL-SG1016DE XSS
- CVE-2024-38471Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a
- CVE-2024-21827A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 2024
- CVE-2024-5035TP-Link Archer C5400X - RFTest Unauthenticated Command Injection
- CVE-2024-5244TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability
- CVE-2024-5243TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-5242TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-5228TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-5227TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability
- CVE-2024-31340TP-Link Tether versions prior to 4.5.13 and TP-Link Tapo versions prior to 3.3.6 do not properly validate certificates, which may allow a re
- CVE-2023-50225TP-Link TL-WR902AC dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-50224TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
- CVE-2023-44448TP-Link Archer A54 libcmm.so dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44447TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability
- CVE-2023-41184TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerability