# cve.now: Tp-link Systems Inc. The newest entries naming Tp-link Systems Inc. as an affected vendor (up to 200), of 212 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-109683](https://cve.now/CVE-2026-109683.md): UPnP Newline Injection Vulnerability in TP-Link Archer BE805 (CVSS 5.3) - [CVE-2026-118865](https://cve.now/CVE-2026-118865.md): Authenticated OS Command Injection in Archer AX3000 v2 Offline Download Component (CVSS 7.3) - [CVE-2026-105822](https://cve.now/CVE-2026-105822.md): Server-Side Request Forgery in Tapo Cloud MQTT Proxy (CVSS 8.3) - [CVE-2026-105821](https://cve.now/CVE-2026-105821.md): Broken Access Control Leading to Cross-Device Token Issuance in Tapo Cloud MQTT Proxy (CVSS 8.3) - [CVE-2026-102816](https://cve.now/CVE-2026-102816.md): Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305 (CVSS 5.3) - [CVE-2026-102815](https://cve.now/CVE-2026-102815.md): Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305 (CVSS 6.9) - [CVE-2026-102814](https://cve.now/CVE-2026-102814.md): Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305 (CVSS 8.7) - [CVE-2026-102813](https://cve.now/CVE-2026-102813.md): Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305 (CVSS 6.1) - [CVE-2026-102812](https://cve.now/CVE-2026-102812.md): Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7 (CVSS 6.9) - [CVE-2026-100420](https://cve.now/CVE-2026-100420.md): Information disclosure vulnerability in the cloud-client daemon of Deco BE63 (CVSS 6.8) - [CVE-2026-89052](https://cve.now/CVE-2026-89052.md): Hardcoded AES encryption key in Archer C6 (CVSS 5.9) - [CVE-2026-105815](https://cve.now/CVE-2026-105815.md): Credential Material Exposure Leading to Unauthorized Streamed Media-Session Access in TP-Link Tapo C210 (CVSS 7.1) - [CVE-2026-105814](https://cve.now/CVE-2026-105814.md): Order-Dependent Authentication Bypass in the DS JSON API in TP-Link Tapo C210 (CVSS 5.3) - [CVE-2026-105810](https://cve.now/CVE-2026-105810.md): Authenticated Local Stack Overflow in TP-Link Tapo C320WS (CVSS 8.5) - [CVE-2026-107795](https://cve.now/CVE-2026-107795.md): Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management API (CVSS 7.5) - [CVE-2026-109506](https://cve.now/CVE-2026-109506.md): Improper Authentication in Multiple TP-Link WiFi Repeaters (CVSS 5.9) - [CVE-2026-108473](https://cve.now/CVE-2026-108473.md): Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices (CVSS 8.7) - [CVE-2026-105674](https://cve.now/CVE-2026-105674.md): Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WB (CVSS 8.7) - [CVE-2026-105672](https://cve.now/CVE-2026-105672.md): Unauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WB (CVSS 8.7) - [CVE-2026-105673](https://cve.now/CVE-2026-105673.md): Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WB (CVSS 7.1) - [CVE-2026-104945](https://cve.now/CVE-2026-104945.md): Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500 (CVSS 6.8) - [CVE-2026-104944](https://cve.now/CVE-2026-104944.md): Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500 (CVSS 7.1) - [CVE-2026-102370](https://cve.now/CVE-2026-102370.md): Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71 (CVSS 5.4) - [CVE-2026-84682](https://cve.now/CVE-2026-84682.md): TDDPv2 setProductVer Command Injection in Archer AX90 (CVSS 7.7) - [CVE-2026-8618](https://cve.now/CVE-2026-8618.md): Pre-Authentication Stack-based Buffer Overflow Remote Code Execution in TDDPv2 Subtype 0x91 on Deco M9 Plus (CVSS 7.7) - [CVE-2026-102369](https://cve.now/CVE-2026-102369.md): Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200 (CVSS 8.7) - [CVE-2026-78578](https://cve.now/CVE-2026-78578.md): Unauthenticated do Method Onboarding Connect Allows Wi‑Fi Reconfiguration Denial of Service Vulnerability in TP-Link Tapo C120 & C200 (CVSS 7.1) - [CVE-2026-78577](https://cve.now/CVE-2026-78577.md): Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200 (CVSS 5.3) - [CVE-2026-9032](https://cve.now/CVE-2026-9032.md): Unauthenticated Onboarding Connect NULL Pointer Dereference Denial of Service Vulnerability in TP-Link Tapo C120 & C200 (CVSS 7.1) - [CVE-2026-84941](https://cve.now/CVE-2026-84941.md): Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read (CVSS 6.9) - [CVE-2026-17176](https://cve.now/CVE-2026-17176.md): OS Command Injection Vulnerability in Deco Devices (CVSS 7.7) - [CVE-2026-76652](https://cve.now/CVE-2026-76652.md): Authenticated Directory Traversal Vulnerability in File Upload Functionality in TP-Link TL-MR6400 and Archer MR600 (CVSS 4.8) - [CVE-2026-76653](https://cve.now/CVE-2026-76653.md): Missing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR600 (CVSS 5.3) - [CVE-2026-85384](https://cve.now/CVE-2026-85384.md): Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import (CVSS 8.5) - [CVE-2026-81531](https://cve.now/CVE-2026-81531.md): Unauthenticated Account Information Disclosure in Multiple Omada Controllers (CVSS 6.9) - [CVE-2026-18167](https://cve.now/CVE-2026-18167.md): Stack-based buffer overflow in TP-Link Archer AX55 v4 (CVSS 7.7) - [CVE-2026-18330](https://cve.now/CVE-2026-18330.md): Hardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7 (CVSS 6.1) - [CVE-2026-75118](https://cve.now/CVE-2026-75118.md): http\_gdpr\_decrypt Pre-Authentication Stack-Based Buffer Overflow (CVSS 8.7) - [CVE-2026-76784](https://cve.now/CVE-2026-76784.md): Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices (CVSS 8.7) - [CVE-2026-78541](https://cve.now/CVE-2026-78541.md): Command Injection in Parent Control of TP-Link Archer BE3600 v1 (CVSS 8.5) - [CVE-2026-16348](https://cve.now/CVE-2026-16348.md): Command Injection Vulnerability in VPN connection of Archer BE800 (CVSS 8.5) - [CVE-2026-9254](https://cve.now/CVE-2026-9254.md): Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices (CVSS 8.7) - [CVE-2026-15469](https://cve.now/CVE-2026-15469.md): Hard-coded Mesh Group Private Key in TP-Link Deco XE75, XE5300, and WE10800 (CVSS 7.7) - [CVE-2026-17252](https://cve.now/CVE-2026-17252.md): Unauthenticated Denial of Service via Composed HTTP Parsing and Stack-Based Out-of-Bounds Write Vulnerability in TL-MR6400 Web Management Interface (CVSS 7.1) - [CVE-2026-17251](https://cve.now/CVE-2026-17251.md): Unauthenticated Denial of Service via Null Pointer Dereference in HTTP Request Parsing (CVSS 7.1) - [CVE-2026-17250](https://cve.now/CVE-2026-17250.md): Authenticated Remote Code Execution via Stack-Based Buffer Overflow in Firmware Update Handling (CVSS 8.5) - [CVE-2026-19683](https://cve.now/CVE-2026-19683.md): Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways (CVSS 6.3) - [CVE-2026-19586](https://cve.now/CVE-2026-19586.md): Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways (CVSS 9.3) - [CVE-2026-9033](https://cve.now/CVE-2026-9033.md): Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways (CVSS 6.0) - [CVE-2026-8619](https://cve.now/CVE-2026-8619.md): Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600 (CVSS 7.1) - [CVE-2026-75616](https://cve.now/CVE-2026-75616.md): Command Injection in Router Web Management Interface (CVSS 8.5) - [CVE-2026-75619](https://cve.now/CVE-2026-75619.md): RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101 (CVSS 6.9) - [CVE-2026-75618](https://cve.now/CVE-2026-75618.md): RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101 (CVSS 7.1) - [CVE-2026-15316](https://cve.now/CVE-2026-15316.md): Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200 (CVSS 7.1) - [CVE-2026-15315](https://cve.now/CVE-2026-15315.md): Unauthenticated Administrative Authentication Bypass via device\_confirm Replay in TP-Link Tapo C120 and C200 (CVSS 8.7) - [CVE-2026-15141](https://cve.now/CVE-2026-15141.md): Referer Validation Bypass in TL-WR820N Web Management Interface (CVSS 5.3) - [CVE-2025-30241](https://cve.now/CVE-2025-30241.md): OS Command Injection in Web Interface in Multiple TP-Link Aginet Devices (CVSS 8.6) - [CVE-2025-30240](https://cve.now/CVE-2025-30240.md): Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices (CVSS 5.1) - [CVE-2025-30239](https://cve.now/CVE-2025-30239.md): Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices (CVSS 8.5) - [CVE-2025-30238](https://cve.now/CVE-2025-30238.md): Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices (CVSS 8.6) - [CVE-2025-30237](https://cve.now/CVE-2025-30237.md): Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet Devices (CVSS 8.7) - [CVE-2026-12339](https://cve.now/CVE-2026-12339.md): Authenticated Arbitrary File Write Vulnerability in multiple devices (CVSS 6.9) - [CVE-2026-9031](https://cve.now/CVE-2026-9031.md): Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6 (CVSS 6.8) - [CVE-2026-9030](https://cve.now/CVE-2026-9030.md): Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6 (CVSS 6.8) - [CVE-2026-15314](https://cve.now/CVE-2026-15314.md): Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110 (CVSS 7.1) - [CVE-2025-15631](https://cve.now/CVE-2025-15631.md): Weak Credential Storage in TP-Link Omada Devices (CVSS 5.7) - [CVE-2025-15630](https://cve.now/CVE-2025-15630.md): Device Provisioning Race Condition in TP-Link Omada Adoption Workflow (CVSS 5.8) - [CVE-2025-15629](https://cve.now/CVE-2025-15629.md): Weak Session Key Generation in TP-Link Omada Adoption Protocol (CVSS 6.9) - [CVE-2025-15628](https://cve.now/CVE-2025-15628.md): Hardcoded Certificates in TP-Link Omada Device Communications (CVSS 8.2) - [CVE-2025-15627](https://cve.now/CVE-2025-15627.md): Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication (CVSS 6.9) - [CVE-2025-15544](https://cve.now/CVE-2025-15544.md): Weak Credential Protection During TP-Link Omada Device Adoption (CVSS 6.9) - [CVE-2025-9291](https://cve.now/CVE-2025-9291.md): Improper Certificate Validation in TP-Link Omada Cloud Communications (CVSS 7.7) - [CVE-2026-9044](https://cve.now/CVE-2026-9044.md): Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75 (CVSS 8.5) - [CVE-2026-12935](https://cve.now/CVE-2026-12935.md): Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature (CVSS 8.7) - [CVE-2026-12001](https://cve.now/CVE-2026-12001.md): Hardcoded Credential Vulnerability in Multiple TP-Link Router Models (CVSS 5.2) - [CVE-2026-13230](https://cve.now/CVE-2026-13230.md): Information Disclosure Vulnerability in Local Discovery Response in TP-Link Kasa EC70 and EC71 (CVSS 5.3) - [CVE-2026-9770](https://cve.now/CVE-2026-9770.md): Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71 (CVSS 8.6) - [CVE-2026-5040](https://cve.now/CVE-2026-5040.md): Weak Password Hashing Mechanism in TP-Link Deco M5 (CVSS 7.1) - [CVE-2026-15429](https://cve.now/CVE-2026-15429.md): Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800v (CVSS 5.1) - [CVE-2026-15428](https://cve.now/CVE-2026-15428.md): OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v (CVSS 8.5) - [CVE-2026-15427](https://cve.now/CVE-2026-15427.md): OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v (CVSS 8.6) - [CVE-2026-8699](https://cve.now/CVE-2026-8699.md): Stored Cross-Site Scripting (XSS) in TP-Link Archer C5 Web Management Interface (CVSS 7.0) - [CVE-2026-10562](https://cve.now/CVE-2026-10562.md): Unauthenticated Open Redirect Vulnerability on TP-Link Archer AX20 Web Interface (CVSS 5.9) - [CVE-2026-9105](https://cve.now/CVE-2026-9105.md): Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web Interface (CVSS 6.8) - [CVE-2026-12760](https://cve.now/CVE-2026-12760.md): Denial-of-Service Vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C200 (CVSS 7.1) - [CVE-2026-11834](https://cve.now/CVE-2026-11834.md): Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link Routers (CVSS 8.7) - [CVE-2026-11409](https://cve.now/CVE-2026-11409.md): OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N (CVSS 8.5) - [CVE-2026-11410](https://cve.now/CVE-2026-11410.md): OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N (CVSS 8.5) - [CVE-2026-6250](https://cve.now/CVE-2026-6250.md): Authenticated Format String Injection on TP-Link Tapo C110 (CVSS 7.0) - [CVE-2026-9151](https://cve.now/CVE-2026-9151.md): Command Injection Vulnerability in OpenVPN on Multiple TP-Link Archer Routers (CVSS 8.5) - [CVE-2026-8913](https://cve.now/CVE-2026-8913.md): Command Injection in Archer MR600 WireGuard Client Configuration (CVSS 8.5) - [CVE-2026-6242](https://cve.now/CVE-2026-6242.md): Authenticated Format String Vulnerability in ONVIF Subscribe Service on TP-Link Tapo C520WS (CVSS 6.8) - [CVE-2026-6241](https://cve.now/CVE-2026-6241.md): Authenticated Format String Vulnerability in ONVIF AddScopes Method on TP-Link Tapo C520WS (CVSS 6.8) - [CVE-2026-6240](https://cve.now/CVE-2026-6240.md): Authenticated Stack-based Buffer Overflow in ONVIF DeleteUsers Service on TP-Link Tapo C520WS (CVSS 6.8) - [CVE-2026-6239](https://cve.now/CVE-2026-6239.md): Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS (CVSS 6.8) - [CVE-2026-34123](https://cve.now/CVE-2026-34123.md): Whitelist Validation Bypass in TP-Link Tapo C520WS (CVSS 7.0) - [CVE-2026-8714](https://cve.now/CVE-2026-8714.md): Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS (CVSS 7.1) - [CVE-2026-1871](https://cve.now/CVE-2026-1871.md): Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200 (CVSS 7.1) - [CVE-2026-34127](https://cve.now/CVE-2026-34127.md): Stored Cross-Site Scripting (XSS) via Configuration File Import on TP-Link's TL-SG108PE (CVSS 5.3) - [CVE-2026-34126](https://cve.now/CVE-2026-34126.md): Bluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100C (CVSS 7.3) - [CVE-2026-8697](https://cve.now/CVE-2026-8697.md): Improper Authentication Rate Limiting on TP-Link's Archer C64 (CVSS 8.7) - [CVE-2026-5509](https://cve.now/CVE-2026-5509.md): Arbitrary Command Injection via Browser Developer Console in TP-Link Archer BE450 and BE7200 (CVSS 8.5) - [CVE-2026-3294](https://cve.now/CVE-2026-3294.md): Authentication Logic Vulnerability on Multiple TP-Link Range Extenders (CVSS 8.7) - [CVE-2026-5511](https://cve.now/CVE-2026-5511.md): Information Disclosure via Diagnostic Interface Due to Improper Input Validation on TP-Link's Archer AX72 (CVSS 4.6) - [CVE-2026-5039](https://cve.now/CVE-2026-5039.md): Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N (CVSS 6.1) - [CVE-2026-5363](https://cve.now/CVE-2026-5363.md): Use of weak cryptographic key in TP-Link Archer C7 (CVSS 5.4) - [CVE-2026-30818](https://cve.now/CVE-2026-30818.md): OS Command Injection Vulnerability in dnsmasq Module in TP-Link AX53 (CVSS 8.5) - [CVE-2026-30817](https://cve.now/CVE-2026-30817.md): Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53 (CVSS 6.8) - [CVE-2026-30816](https://cve.now/CVE-2026-30816.md): Arbitrary File Reading Vulnerability in OpenVPN Module in TP-Link AX53 (CVSS 6.8) - [CVE-2026-30815](https://cve.now/CVE-2026-30815.md): OS Command Injection Vulnerability in OpenVPN Module in TP-Link AX53 (CVSS 8.5) - [CVE-2026-30814](https://cve.now/CVE-2026-30814.md): Buffer Overflow Vulnerability in TP-Link AX53 (CVSS 7.3) - [CVE-2026-34124](https://cve.now/CVE-2026-34124.md): Denial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WS (CVSS 7.1) - [CVE-2026-34122](https://cve.now/CVE-2026-34122.md): Stack-based Buffer Overflow Leading to Denial of Service in TP-Link Tapo C520WS (CVSS 7.1) - [CVE-2026-34121](https://cve.now/CVE-2026-34121.md): Authentication Bypass in DS Configuration Service via HTTP Request Parsing Differential of TP-Link Tapo C520WS and C210 (CVSS 8.7) - [CVE-2026-34120](https://cve.now/CVE-2026-34120.md): Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS (CVSS 7.1) - [CVE-2026-34119](https://cve.now/CVE-2026-34119.md): Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS (CVSS 7.1) - [CVE-2026-34118](https://cve.now/CVE-2026-34118.md): Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in multiple TP-Link Tapo Cameras (CVSS 7.1) - [CVE-2026-4346](https://cve.now/CVE-2026-4346.md): Cleartext Storage of Administrative and Wi-Fi Credentials via Accessible Serial Interface in TP Link's TL-WR850N (CVSS 5.1) - [CVE-2026-3622](https://cve.now/CVE-2026-3622.md): Denial-of-Service Vulnerability in UPnP Component of TP Link's TL-WR841N (CVSS 7.1) - [CVE-2025-15606](https://cve.now/CVE-2025-15606.md): Denial of Service (DoS) in HTTPD Input Handling on TP-Link TD-W8961N (CVSS 7.1) - [CVE-2025-15605](https://cve.now/CVE-2025-15605.md): Hardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 (CVSS 8.5) - [CVE-2025-15519](https://cve.now/CVE-2025-15519.md): Command Injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX600 (CVSS 8.5) - [CVE-2025-15518](https://cve.now/CVE-2025-15518.md): Command Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX600 (CVSS 8.5) - [CVE-2025-15517](https://cve.now/CVE-2025-15517.md): Authorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX600 (CVSS 8.6) - [CVE-2025-15608](https://cve.now/CVE-2025-15608.md): Buffer Overflow in Network Probe Handling Function of TP-Link Archer AX53 + Archer AX55 (CVSS 7.7) - [CVE-2025-15607](https://cve.now/CVE-2025-15607.md): Authenticated Command Injection in mcsd Service of TP-Link Archer AX53 (CVSS 7.3) - [CVE-2026-3227](https://cve.now/CVE-2026-3227.md): Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N (CVSS 8.5) - [CVE-2026-1668](https://cve.now/CVE-2026-1668.md): Input Validation Vulnerability on Multiple Omada Switches (CVSS 7.7) - [CVE-2026-3841](https://cve.now/CVE-2026-3841.md): Command Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400 (CVSS 8.5) - [CVE-2025-15568](https://cve.now/CVE-2025-15568.md): Command Injection Vulnerability on TP-Link Archer AXE75 (CVSS 8.5) - [CVE-2025-7375](https://cve.now/CVE-2025-7375.md): Unauthenticated Denial-of-Service Vulnerability in Omada EAP610 (CVSS 6.9) - [CVE-2026-0654](https://cve.now/CVE-2026-0654.md): Command injection on TP-Link Deco BE25 (CVSS 8.5) - [CVE-2026-0655](https://cve.now/CVE-2026-0655.md): Path Traversal on TP-Link Deco BE25 (CVSS 6.9) - [CVE-2025-9293](https://cve.now/CVE-2025-9293.md): Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception (CVSS 7.7) - [CVE-2025-9292](https://cve.now/CVE-2025-9292.md): Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers (CVSS 2.0) - [CVE-2026-1571](https://cve.now/CVE-2026-1571.md): Reflected XSS Vulnerability on TP-Link Archer C60 (CVSS 5.3) - [CVE-2026-0651](https://cve.now/CVE-2026-0651.md): Path Traversal on TP-Link Tapo D235, C211, C520WS and C260 via Local https (CVSS 6.9) - [CVE-2026-0652](https://cve.now/CVE-2026-0652.md): Remote Code Execution on TP-Link Tapo C260 by Guest User (CVSS 8.7) - [CVE-2026-0653](https://cve.now/CVE-2026-0653.md): Insecure Access Control on TP-Link Tapo D235 and C260 (CVSS 7.2) - [CVE-2025-15557](https://cve.now/CVE-2025-15557.md): Improper Certificate Validation in TP-Link Tapo H100 and P100 Allows Man-in-the-Middle Attack (CVSS 7.5) - [CVE-2025-15551](https://cve.now/CVE-2025-15551.md): LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N (CVSS 5.9) - [CVE-2025-62673](https://cve.now/CVE-2025-62673.md): Heap-based Buffer Overflow Vulnerability in Archer AX53 and AX12 (CVSS 8.6) - [CVE-2025-62501](https://cve.now/CVE-2025-62501.md): SSH Hostkey Misconfiguration Vulnerability in Archer Devices (CVSS 7.0) - [CVE-2025-62405](https://cve.now/CVE-2025-62405.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3) - [CVE-2025-62404](https://cve.now/CVE-2025-62404.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3) - [CVE-2025-61983](https://cve.now/CVE-2025-61983.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3) - [CVE-2025-61944](https://cve.now/CVE-2025-61944.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3) - [CVE-2025-59487](https://cve.now/CVE-2025-59487.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3) - [CVE-2025-59482](https://cve.now/CVE-2025-59482.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3) - [CVE-2025-58455](https://cve.now/CVE-2025-58455.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3) - [CVE-2025-58077](https://cve.now/CVE-2025-58077.md): Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53 (CVSS 7.3) - [CVE-2026-0620](https://cve.now/CVE-2026-0620.md): L2TP over IPSec Encryption Failure on ArcherAXE75 (CVSS 6.0) - [CVE-2026-22228](https://cve.now/CVE-2026-22228.md): Improper Input Validation Leading to DoS on TP-Link Archer BE230 (CVSS 6.8) - [CVE-2026-22220](https://cve.now/CVE-2026-22220.md): Improper Input Validation Leading to DoS on TP-Link Archer BE230 (CVSS 6.8) - [CVE-2026-22229](https://cve.now/CVE-2026-22229.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and Deco BE25 v1.0 (CVSS 8.6) - [CVE-2026-22227](https://cve.now/CVE-2026-22227.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 (CVSS 8.5) - [CVE-2026-22226](https://cve.now/CVE-2026-22226.md): Command Injection Vulnerability on TP-Link Archer BE230 and AX73 (CVSS 8.5) - [CVE-2026-22225](https://cve.now/CVE-2026-22225.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0 (CVSS 8.5) - [CVE-2026-22224](https://cve.now/CVE-2026-22224.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 (CVSS 8.5) - [CVE-2026-22223](https://cve.now/CVE-2026-22223.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1 (CVSS 8.5) - [CVE-2026-22222](https://cve.now/CVE-2026-22222.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v2 (CVSS 8.5) - [CVE-2026-0631](https://cve.now/CVE-2026-0631.md): Authenticated Command Injection Vulnerability in Surfshark VPN Login in multiple Archer products (CVSS 8.5) - [CVE-2026-0630](https://cve.now/CVE-2026-0630.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0 (CVSS 8.5) - [CVE-2026-22221](https://cve.now/CVE-2026-22221.md): Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1 (CVSS 8.5) - [CVE-2026-1457](https://cve.now/CVE-2026-1457.md): Authenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385 (CVSS 8.5) - [CVE-2025-15548](https://cve.now/CVE-2025-15548.md): Missing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800v (CVSS 5.3) - [CVE-2025-15543](https://cve.now/CVE-2025-15543.md): Read-Only Root Access via USB Storage Device in TP-Link VX800v (CVSS 5.1) - [CVE-2025-15542](https://cve.now/CVE-2025-15542.md): Denial of Service (DoS) of VoIP Communication on TP-Link VX800v (CVSS 6.3) - [CVE-2025-15541](https://cve.now/CVE-2025-15541.md): Access to System Files via SFTP on TP-Link VX800v (CVSS 6.9) - [CVE-2025-13399](https://cve.now/CVE-2025-13399.md): Insecure Encryption in Communication with the Web Interface on TP-Link VX800v (CVSS 7.7) - [CVE-2025-15545](https://cve.now/CVE-2025-15545.md): Insufficient Backup File Upload Input Validation on TP-Link Archer RE605X (CVSS 7.3) - [CVE-2026-1315](https://cve.now/CVE-2026-1315.md): Unauthenticated Denial of Service via Firmware Update Endpoint on TP-Link Tapo C220 & C520WS (CVSS 7.1) - [CVE-2026-0919](https://cve.now/CVE-2026-0919.md): Unauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS (CVSS 7.1) - [CVE-2026-0918](https://cve.now/CVE-2026-0918.md): Null Pointer Dereference in Tapo SmartCam HTTP Service on TP-Link Tapo C220 & C520WS (CVSS 7.1) - [CVE-2025-9522](https://cve.now/CVE-2025-9522.md): Blind Server-Side Request Forgery (SSRF) in Omada Controller (CVSS 5.1) - [CVE-2025-9521](https://cve.now/CVE-2025-9521.md): Password Confirmation Bypass in Omada Controller (CVSS 2.1) - [CVE-2025-9520](https://cve.now/CVE-2025-9520.md): IDOR Leading to Owner Account Hijacking in Omada Controller (CVSS 8.3) - [CVE-2025-14756](https://cve.now/CVE-2025-14756.md): Authenticated Command Injection Vulnerability in Archer MR600 (CVSS 8.5) - [CVE-2025-9290](https://cve.now/CVE-2025-9290.md): Authentication Weakness on Omada Controllers, Gateways and Access Points (CVSS 6.0) - [CVE-2025-9289](https://cve.now/CVE-2025-9289.md): Cross-Site Scripting (XSS) on Omada Controllers (CVSS 5.7) - [CVE-2026-0834](https://cve.now/CVE-2026-0834.md): Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13 (CVSS 7.2) - [CVE-2026-0629](https://cve.now/CVE-2026-0629.md): Authentication Bypass in Password Recovery Feature via Local Web App on Multiple VIGI Cameras (CVSS 8.7) - [CVE-2025-9014](https://cve.now/CVE-2025-9014.md): Null Pointer Dereference Vulnerability on TL-WR841N (CVSS 6.3) - [CVE-2025-15035](https://cve.now/CVE-2025-15035.md): Arbitrary File Deletion Vulnerability in TP-Link Archer AXE75 (CVSS 6.9) - [CVE-2025-14631](https://cve.now/CVE-2025-14631.md): Null Pointer Dereference Vulnerability in Malformed 802.11 Frame of TP-Link Archer BE400 (CVSS 7.1) - [CVE-2025-14175](https://cve.now/CVE-2025-14175.md): Weak Algorithm Support in SSH Server on TL-WR820N (CVSS 6.0) - [CVE-2025-14300](https://cve.now/CVE-2025-14300.md): Unauthenticated Access to connectAP API Endpoint on Tapo C100, C200 & C425 (CVSS 8.7) - [CVE-2025-14299](https://cve.now/CVE-2025-14299.md): Improper Content-Length Validation in HTTPS Requests on Tapo C200 (CVSS 7.1) - [CVE-2025-8065](https://cve.now/CVE-2025-8065.md): Remote Code Execution via Stack-based Buffer Overflow in ONVIF SOAP Parser in TP-Link Tapo C200 and C520WS (CVSS 8.7) - [CVE-2025-14739](https://cve.now/CVE-2025-14739.md): Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND (CVSS 6.8) - [CVE-2025-14738](https://cve.now/CVE-2025-14738.md): Configuration Disclosure Vulnerability in TP-Link WA850RE (CVSS 5.7) - [CVE-2025-14737](https://cve.now/CVE-2025-14737.md): Command Injection Vulnerability in TP-Link WA850RE (CVSS 7.1) - [CVE-2025-14553](https://cve.now/CVE-2025-14553.md): Password Hash Leak Could Lead to Unauthorized Access on Tapo App via Local Network (CVSS 7.0) - [CVE-2025-7851](https://cve.now/CVE-2025-7851.md): Unauthorized root access via debug functionality (CVSS 8.7) - [CVE-2025-7850](https://cve.now/CVE-2025-7850.md): Authenticated OS command execution (CVSS 9.3) - [CVE-2025-6542](https://cve.now/CVE-2025-6542.md): OS command injection in multiple parameters (CVSS 9.3) - [CVE-2025-6541](https://cve.now/CVE-2025-6541.md): OS command injection using information obtained from the web management interface (CVSS 8.6) - [CVE-2025-10991](https://cve.now/CVE-2025-10991.md): Root Access via UART (CVSS 7.0) - [CVE-2025-9961](https://cve.now/CVE-2025-9961.md): Authenticated RCE by CWMP binary (CVSS 8.6) - [CVE-2025-9377](https://cve.now/CVE-2025-9377.md): Authenticated RCE via Parental Control command injection (CVSS 8.6, KEV) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/tp-link-systems Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.