Tp-link Systems Inc. vulnerabilities
212 CVEs and advisories name Tp-link Systems Inc. as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-109683UPnP Newline Injection Vulnerability in TP-Link Archer BE805
- CVE-2026-118865Authenticated OS Command Injection in Archer AX3000 v2 Offline Download Component
- CVE-2026-105822Server-Side Request Forgery in Tapo Cloud MQTT Proxy
- CVE-2026-105821Broken Access Control Leading to Cross-Device Token Issuance in Tapo Cloud MQTT Proxy
- CVE-2026-102816Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305
- CVE-2026-102815Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305
- CVE-2026-102814Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305
- CVE-2026-102813Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305
- CVE-2026-102812Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7
- CVE-2026-100420Information disclosure vulnerability in the cloud-client daemon of Deco BE63
- CVE-2026-89052Hardcoded AES encryption key in Archer C6
- CVE-2026-105815Credential Material Exposure Leading to Unauthorized Streamed Media-Session Access in TP-Link Tapo C210
- CVE-2026-105814Order-Dependent Authentication Bypass in the DS JSON API in TP-Link Tapo C210
- CVE-2026-105810Authenticated Local Stack Overflow in TP-Link Tapo C320WS
- CVE-2026-107795Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management API
- CVE-2026-109506Improper Authentication in Multiple TP-Link WiFi Repeaters
- CVE-2026-108473Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices
- CVE-2026-105674Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WB
- CVE-2026-105672Unauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WB
- CVE-2026-105673Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WB
- CVE-2026-104945Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500
- CVE-2026-104944Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500
- CVE-2026-102370Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71
- CVE-2026-84682TDDPv2 setProductVer Command Injection in Archer AX90
- CVE-2026-8618Pre-Authentication Stack-based Buffer Overflow Remote Code Execution in TDDPv2 Subtype 0x91 on Deco M9 Plus
- CVE-2026-102369Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200
- CVE-2026-78578Unauthenticated do Method Onboarding Connect Allows Wi‑Fi Reconfiguration Denial of Service Vulnerability in TP-Link Tapo C120 & C200
- CVE-2026-78577Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200
- CVE-2026-9032Unauthenticated Onboarding Connect NULL Pointer Dereference Denial of Service Vulnerability in TP-Link Tapo C120 & C200
- CVE-2026-84941Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read