Tp-link Systems Inc - vulnerabilities (CVEs)
12 CVEs in 9 products, 0 in the last 30 days, newest from 2026-09-08.
Products
- Omada Controllers - 5 CVEs
- Er7406 V1 - 3 CVEs
- Er7412-m2 V1 - 3 CVEs
- Archer Be3600 V1 - 1 CVEs
- Archer Mr600 V2 - 1 CVEs
- Oc200 V3 - 1 CVEs
- Oc220 V2 - 1 CVEs
- Omada Olts - 1 CVEs
- Tapo C120 V1 - 1 CVEs
Newest CVEs of Tp-link Systems Inc
- CVE-2026-81531 - CVSS 6.9 (medium), 2026-09-08: An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization remains accessible…
- CVE-2026-19683 - CVSS 7.4 (high), 2026-08-20: A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication…
- CVE-2026-19586 - CVSS 9.8 (critical), 2026-08-20: A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient…
- CVE-2026-9033 - CVSS 6 (medium), 2026-08-20: An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including…
- CVE-2026-8619 - CVSS 7.5 (high), 2026-08-19: An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper…
- CVE-2026-15315 - CVSS 8.8 (high), 2026-08-18: Tapo C120 v1 and C200 v5 contain an improper authentication vulnerability within the login authentication verification module. An attacker on the local…
- CVE-2025-15630 - CVSS 5.9 (medium), 2026-08-03: A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a…
- CVE-2025-15629 - CVSS 7.5 (high), 2026-08-03: A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed…
- CVE-2025-15628 - CVSS 8.2 (high), 2026-08-03: Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An…
- CVE-2025-15627 - CVSS 7.5 (high), 2026-08-03: A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect…
- CVE-2025-15544 - CVSS 6.9 (medium), 2026-08-03: A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are…
- CVE-2026-22221 - CVSS 8.5 (high), 2026-02-02: An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1 allows adjacent authenticated attacker execute arbitrary…
