Tp-link Systems Inc. - vulnerabilities (CVEs)

207 CVEs in 465 products, 25 in the last 30 days, newest from 2026-10-27.

Products

Archer Ax53 V1.0 - 11 CVEs
Archer Be230 V1.2 - 11 CVEs
Omada Gateways - 11 CVEs
Tapo C520ws V2 - 9 CVEs
Omada Switches - 7 CVEs
Tapo C200 V5 - 7 CVEs
Tapo C520ws V2.6 - 7 CVEs
Re305 V3 - 6 CVEs
Tl-wr841n V11 - 6 CVEs
Ax53 V1.0 - 5 CVEs
Ex220br V1.01.201.281.291.8 - 5 CVEs
Ex220br V2.0 - 5 CVEs
Ex220eu1 V1.01.20 - 5 CVEs
Ex220ru V1.0 - 5 CVEs
Ex220us1 V1.0 - 5 CVEs
Ex222eu1 V1.0 - 5 CVEs
Ex222kr V1.0 - 5 CVEs
Ex222us1 V1.0 - 5 CVEs
Ex520veu11.0 - 5 CVEs
Ex820veu1 V1.0 - 5 CVEs
Ex920us2 V1.6v1.0 - 5 CVEs
Hb210 Proeu11.0 - 5 CVEs
Hb210 Prous21.01.6 - 5 CVEs
Hb210eu1 1.0 - 5 CVEs
Hb210us2 1.0 - 5 CVEs
Hb410 Eu1 1.0 - 5 CVEs
Hb610ca V2.0 - 5 CVEs
Hb610eu1 - 5 CVEs
Hb610us2 V2.62.0 - 5 CVEs
Hb710eu1 1.0 - 5 CVEs
Hb710us2 V1.61.0 - 5 CVEs
Hb810eu1 V2.0 - 5 CVEs
Hb810us2 V1.01.62.02.6 - 5 CVEs
Vx420-g2hau V3.0 - 5 CVEs
Vx800v V1.0 - 5 CVEs
Vx800vde V1.0 - 5 CVEs
Xx530vbrv2.0 - 5 CVEs
Xx530veu1 - 5 CVEs
Archer C20 V5 - 4 CVEs
Archer C20 V6 - 4 CVEs
Archer Nx200 V1.0 - 4 CVEs
Archer Nx200 V2.0 - 4 CVEs
Archer Nx200 V2.20 - 4 CVEs
Archer Nx200 V3.0 - 4 CVEs
Archer Nx210 V2.0 V2.20 - 4 CVEs
Archer Nx210 V3.0 - 4 CVEs
Archer Nx500 V1.0 - 4 CVEs
Archer Nx500 V2.0 - 4 CVEs
Archer Nx600 V1.0 - 4 CVEs
Archer Nx600 V2.0 - 4 CVEs
Archer Nx600 V3.0 - 4 CVEs
Eb810veu1 V1.0 - 4 CVEs
Festa Gateways - 4 CVEs
Omada Pro Gateways - 4 CVEs
Tapo C120 V1 - 4 CVEs
Tl-wr841n V14 - 4 CVEs
Vx1800veu1 V1.0 - 4 CVEs
Xc220-g3veu1 V2.30 - 4 CVEs
Xc220-g3vus1 V2.30 - 4 CVEs
Xx230vbr V1.0 - 4 CVEs
Xx530vbrv1.0 - 4 CVEs
Xx530vus1 - 4 CVEs
Archer Be3600 V1 - 3 CVEs
Archer Vx1800v V1 - 3 CVEs
Deco Be25 V1.0 - 3 CVEs
Dr3150 V1 - 3 CVEs
Dr3220v-4g V1 - 3 CVEs
Dr3650v-4g V1 - 3 CVEs
Dr3650v V1 - 3 CVEs
Eb210 Proeu1 1.0 - 3 CVEs
Eb210 Prous1 1.0 - 3 CVEs
Er603wp-4g-outdoor V1 - 3 CVEs
Er605 V2 - 3 CVEs
Er605w V2 - 3 CVEs
Er701-5g-outdoor V1 - 3 CVEs
Er703wp-4g-outdoor V1 - 3 CVEs
Er706w-4g V2 - 3 CVEs
Er706w V1 - 3 CVEs
Er706wp-4g V1 - 3 CVEs
Er707-m2 V1 - 3 CVEs
Er7206 V2 - 3 CVEs
Er7212pc V2 - 3 CVEs
Er8411 V1 - 3 CVEs
Ex141br V1.01.9 - 3 CVEs
Ex141eu1 V1.0 - 3 CVEs
Ex141us1 V1.0 - 3 CVEs
Ex511br V2.02.82.9 - 3 CVEs
Ex511eu1 V2.0 - 3 CVEs
Ex511us1 V2.0 - 3 CVEs
Ex520us1 V1.0 - 3 CVEs
Ex521us1 V1.0 - 3 CVEs
Hc220-g5br V1.30 - 3 CVEs
Hc220-g5eu1 V1.201.0 - 3 CVEs
Hc220-g5us1 V1.01.6 - 3 CVEs
Hx141eu1 V1.0 - 3 CVEs
Hx220au V1.0 - 3 CVEs
Hx220ca V1.0 - 3 CVEs
Hx220eu1 V1.0 - 3 CVEs
Hx220us1 V1.01.6 - 3 CVEs
Hx510au V1.02.0 - 3 CVEs
Hx510ca V1.02.0 - 3 CVEs
Hx510eu1 V2.0 - 3 CVEs
Hx510us1 V2.0 - 3 CVEs
Hx510us2 2.6 - 3 CVEs
Hx710 Proeu1 V1.0 - 3 CVEs
Hx710eu1 V1.0 - 3 CVEs
Kasa Ec70 V4 - 3 CVEs
Kasa Ec71 V4 - 3 CVEs
Omada Cloud Controller - 3 CVEs
Omada Controller - 3 CVEs
Omada Software Controller - 3 CVEs
Tapo C100 V5 - 3 CVEs
Tapo C200 V3 - 3 CVEs
Tapo C220 V1 - 3 CVEs
Tapo C260 V1 - 3 CVEs
Tapo C325wb V2 - 3 CVEs
Tl-mr6400 V7.0 - 3 CVEs
Tl-wr940n V6 - 3 CVEs
Archer A6 V4 - 2 CVEs
Archer Ax12 V1 - 2 CVEs
Archer Be800 V1 - 2 CVEs
Archer C7 V5 - 2 CVEs
Archer Mr600 - 2 CVEs
Ax53 V1 - 2 CVEs
Deco M9 Plus V2 - 2 CVEs
Hs300 V2 - 2 CVEs
Kp200 V3 - 2 CVEs
Kp303 V2 - 2 CVEs
Oc220 V1 - 2 CVEs
Oc300 - 2 CVEs
Oc300 V1 - 2 CVEs
Oc400 - 2 CVEs
Oc400 V1 - 2 CVEs
Omada Olts - 2 CVEs
Tapo C101 V5 - 2 CVEs
Tapo C210 V3.6 - 2 CVEs
Tapo C500 V2.0 - 2 CVEs
Tapo D235 V1 - 2 CVEs
Tl-mr100 V3.20 - 2 CVEs
Tl-mr6400 V5.3 - 2 CVEs
Tl-mr6400 V8 - 2 CVEs
Tl-mr6400 V8.0 - 2 CVEs
Tl-wr850n V3 - 2 CVEs
Tp-link Tapo App - 2 CVEs
V1 - 2 CVEs
Vigi Nvr1104h-4p V1 - 2 CVEs
Vigi Nvr2016h-16mp V2 - 2 CVEs
Wa850re - 2 CVEs
Aginet App - 1 CVEs
Archer Ax1300 V1.6 - 1 CVEs
Archer Ax18 V1 - 1 CVEs
Archer Ax20 V2.0 - 1 CVEs
Archer Ax55 V4 - 1 CVEs
Archer Ax72 Sg V1.0 - 1 CVEs
Archer Ax75 V1 - 1 CVEs
Archer Ax90 V1 - 1 CVEs
Archer Axe75 V1 - 1 CVEs
Archer Axe75 V1.6 - 1 CVEs
Archer Axe75 V1.6v1.0 - 1 CVEs
Archer Be3600 V1.2 - 1 CVEs
Archer Be400 - 1 CVEs
Archer Be450 V1 - 1 CVEs
Archer Be7200 V1 - 1 CVEs
Archer C20 V6.0 - 1 CVEs
Archer C50 V3 - 1 CVEs
Archer C50 V4 - 1 CVEs
Archer C50 V5 - 1 CVEs
Archer C5 V6.8 - 1 CVEs
Archer C60 V3 - 1 CVEs
Archer C64 V1.0 - 1 CVEs
Archer C6 V2 - 1 CVEs
Archer C7 V5 And V5.8 - 1 CVEs
Archer C7eu V2 - 1 CVEs
Archer Mr200 V07 - 1 CVEs
Archer Mr200 V5 - 1 CVEs
Archer Mr200 V5.2 - 1 CVEs
Archer Mr200 V7 - 1 CVEs
Archer Mr200 V8 - 1 CVEs
Archer Mr600 V2 - 1 CVEs
Archer Mr600 V5 - 1 CVEs
Archer Mr600 V5.0 - 1 CVEs
Archer Re305 V1 - 1 CVEs
Archer Re605x - 1 CVEs
Archer Re650 V1 - 1 CVEs
Archer Vr2100 V1 - 1 CVEs
Ax10 V1v1.2v2v2.6v3v3.6 - 1 CVEs
Ax1500 V1v1.20v1.26v1.60v1.80v2.60v3.6 - 1 CVEs
Ax55 V4 - 1 CVEs
Ax55 V4.6 - 1 CVEs
Axe75 - 1 CVEs
Axe75 V1 - 1 CVEs
Deco App - 1 CVEs
Deco Be11000 V2 - 1 CVEs
Deco Be63 V2.0 - 1 CVEs
Deco M5 Deco M5 V1 - 1 CVEs
Deco Xe75 V3 Xe5300 V3.6 We10800 V3.6 - 1 CVEs
Dr3220v-4g - 1 CVEs
Dr3650v - 1 CVEs
Dr3650v-4g - 1 CVEs
Eap211 Bridge Kit 3.0 - 1 CVEs
Eap235-wall V1.0 - 1 CVEs
Eap610 V3 - 1 CVEs
Eap610eap610-outdoor V1.0v2.0 - 1 CVEs
Eap610gp-desktop 1.01.201.26 - 1 CVEs
Eap615-wall V1.0v1.20 - 1 CVEs
Eap615gp-wall 1.20 - 1 CVEs
Eap620 Hd V2.0v3.0v3.20 - 1 CVEs
Eap623-outdoor Hd V1.0 - 1 CVEs
Eap625-outdoor Hd V1.0eap - 1 CVEs
Eap625gp-wall 1.01.20 - 1 CVEs
Eap650-desktop V1.0 - 1 CVEs
Eap650-outdoor V1.0 - 1 CVEs
Eap720 V1.0 - 1 CVEs
Eap723 V2.0 - 1 CVEs
Eap725-wall V1.0 - 1 CVEs
Eap770 V2.0 - 1 CVEs
Eap772-outdoor V 1.0 - 1 CVEs
Eap772 V2.0 - 1 CVEs
Eap773 V1.0 - 1 CVEs
Eap783 V1.0 - 1 CVEs
Eap787 V1.0 - 1 CVEs
Ec220-g5br V3.0 - 1 CVEs
Ec220-g5eu1 V3.0 - 1 CVEs
Ec220-g5us1 V3.0 - 1 CVEs
Ec225-g5br V1.0 - 1 CVEs
Ec225-g5eu1 V1.0 - 1 CVEs
Ec225-g5us1 V1.0 - 1 CVEs
Ep10 - 1 CVEs
Ep10 V1 - 1 CVEs
Ep25 V2 - 1 CVEs
Ep40 V1 - 1 CVEs
Ep40a - 1 CVEs
Ep40a V1 - 1 CVEs
Ep40m - 1 CVEs
Er-8411 - 1 CVEs
Er703wp-4g-outdoor - 1 CVEs
Er706-4g - 1 CVEs
Er706w - 1 CVEs
Er706w-4g V1 - 1 CVEs
Er706wp-4g - 1 CVEs
Es20m - 1 CVEs
Es20m V1 - 1 CVEs
Festa App - 1 CVEs
Hs103 V5 - 1 CVEs
Hs103p3 Hs103p4 V5 - 1 CVEs
Hs200 V5 - 1 CVEs
Hs200 V5.26 - 1 CVEs
Hs210 V3 - 1 CVEs
Hs220-laus 4.6 Hs220-blus 4.6 - 1 CVEs
Hs220-laus 6.6 Hs220-blus 6.6 - 1 CVEs
Hs220 V3 - 1 CVEs
Hs220 V3.26 - 1 CVEs
Kasa App - 1 CVEs
Kidshield - 1 CVEs
Kl110 V4 - 1 CVEs
Kl125 - 1 CVEs
Kl125 V4 - 1 CVEs
Kl135 V2 - 1 CVEs
Kl420l5 V1 - 1 CVEs
Kp115 - 1 CVEs
Kp115 V1 - 1 CVEs
Kp125mp2 Kp125mp4 - 1 CVEs
Kp400 V3 - 1 CVEs
Kp401 V1 - 1 CVEs
Kp405 V1 - 1 CVEs
Ks200 V1 - 1 CVEs
Ks200m V1 - 1 CVEs
Ks205 - 1 CVEs
Ks220 V1 - 1 CVEs
Ks220m - 1 CVEs
Ks220m V1 - 1 CVEs
Ks225 - 1 CVEs
Ks230 Kit V2 - 1 CVEs
Ks240 - 1 CVEs
Oc2000 V1 - 1 CVEs
Oc2000 V2 - 1 CVEs
Oc200 V1 - 1 CVEs
Oc200 V3 - 1 CVEs
Oc220 - 1 CVEs
Oc220 V2 - 1 CVEs
Omada Access Point Eap215 Bridge Kit 3.0 - 1 CVEs
Omada Access Point Eap230-wall V1.0 - 1 CVEs
Omada Access Point Eap603-outdoor V1.0 - 1 CVEs
Omada Access Point Eap603gp-desktop - 1 CVEs
Omada Access Point Eap615-wall V1.0v1.20 - 1 CVEs
Omada Access Point Eap650gp-desktop 1.0 - 1 CVEs
Omada Access Point Eap653 Ur V1.0 - 1 CVEs
Omada Access Point Eap653 V1.0 - 1 CVEs
Omada Access Point Eap655-wall V1.0 - 1 CVEs
Omada Access Point Eap660 Hd V1.0v2.0 - 1 CVEs
Omada Access Point Eap723 V1.0 - 1 CVEs
Omada Access Point Eap772 V1.0 - 1 CVEs
Omada Access Points - 1 CVEs
Omada App - 1 CVEs
Omada Beam Bridge 5 Ur V1.0 - 1 CVEs
Omada Eap100-bridge Kit V1.0 - 1 CVEs
Omada Festa Gateway Fr365 - 1 CVEs
Omada Gateway Er605 V2.0 - 1 CVEs
Omada Gateway Er605w 2.0 - 1 CVEs
Omada Gateway Er701-5g-outdoor - 1 CVEs
Omada Gateway Er706w-4g 2.0 - 1 CVEs
Omada Gateway Er707-m2 - 1 CVEs
Omada Gateway Er7206 V2.0 - 1 CVEs
Omada Gateway Er7212pc 2.0 - 1 CVEs
Omada Gateway Er7406 - 1 CVEs
Omada Gateway Er7412-m2 - 1 CVEs
Omada Gateway Er8411 - 1 CVEs
Omada Gateway G36w-4g - 1 CVEs
Omada Guard - 1 CVEs
Omada Hardware Controller Oc200 - 1 CVEs
Omada Hardware Controller Oc220 - 1 CVEs
Omada Oc200 - 1 CVEs
Omada Software Controller Linux - 1 CVEs
Omada Software Controller Windows - 1 CVEs
P110 V1 - 1 CVEs
Re190 V5 - 1 CVEs
Re200 V5 - 1 CVEs
Re205 V4 - 1 CVEs
Re210 Ac750 - 1 CVEs
Re215 V1 - 1 CVEs
Re220 V3 - 1 CVEs
Re230 V2 - 1 CVEs
Re300 V2 - 1 CVEs
Re305 V4 - 1 CVEs
Re315 V1 - 1 CVEs
Re330 V1 - 1 CVEs
Re335 V1 - 1 CVEs
Re365 V2 - 1 CVEs
Re365 V3 - 1 CVEs
Re450 V4.8 - 1 CVEs
Re550 V1 - 1 CVEs
Re580d V1 - 1 CVEs
Re750c V4 - 1 CVEs
Sg2005p-pd 1.x - 1 CVEs
Sg2008 4.2x - 1 CVEs
Sg2008 4.3x - 1 CVEs
Sg2008p 3.2x - 1 CVEs
Sg2008p 3.3x - 1 CVEs
Sg2016p 1.2x - 1 CVEs
Sg2016p 1.3x - 1 CVEs
Sg2210mp 4.2x - 1 CVEs
Sg2210mp 5.2x - 1 CVEs
Sg2210mp 5.x - 1 CVEs
Sg2210p 5.2x - 1 CVEs
Sg2210p 5.3x - 1 CVEs
Sg2210xmp-m2 1.x - 1 CVEs
Sg2218 1.2x - 1 CVEs
Sg2218 1.3x - 1 CVEs
Sg2218p 1.2x - 1 CVEs
Sg2218p 2.2x - 1 CVEs
Sg2218p 2.x - 1 CVEs
Sg2428lp 1.x - 1 CVEs
Sg2428p 5.2x - 1 CVEs
Sg2428p 5.3x - 1 CVEs
Sg2452lp 1.x - 1 CVEs
Sg3210 3.2x - 1 CVEs
Sg3210 3.3x - 1 CVEs
Sg3210x-m2 1.2x - 1 CVEs
Sg3210x-m2 1.x - 1 CVEs
Sg3210xhp-m2 3.x - 1 CVEs
Sg3218xp-m2 1.x - 1 CVEs
Sg3428 2.3x - 1 CVEs
Sg3428 2.4x - 1 CVEs
Sg3428mp 6.2x - 1 CVEs
Sg3428mp 6.3x - 1 CVEs
Sg3428x-m2 1.2x - 1 CVEs
Sg3428x 1.3x - 1 CVEs
Sg3428x 1.4x - 1 CVEs
Sg3428xf 1.2x - 1 CVEs
Sg3428xf 1.3x - 1 CVEs
Sg3428xmp 3.2x - 1 CVEs
Sg3428xmp 3.3x - 1 CVEs
Sg3428xmpp 1.2x - 1 CVEs
Sg3428xmpp 1.x - 1 CVEs
Sg3428xpp-m2 1.2x - 1 CVEs
Sg3452 1.2x - 1 CVEs
Sg3452 1.3x - 1 CVEs
Sg3452p 3.3x - 1 CVEs
Sg3452p 3.4x - 1 CVEs
Sg3452x 1.2x - 1 CVEs
Sg3452x 1.3x - 1 CVEs
Sg3452xmpp 1.x - 1 CVEs
Sg3452xp 2.2x - 1 CVEs
Sg3452xp 2.3x - 1 CVEs
Sl2428p 6.2x - 1 CVEs
Sx3008f 1.2x - 1 CVEs
Sx3016f 1.2x - 1 CVEs
Sx3016f 1.3x - 1 CVEs
Sx3032f 1.x - 1 CVEs
Sx3206hpp 1.20 - 1 CVEs
Sx3832 1.x - 1 CVEs
Sx3832mpp 1.x - 1 CVEs
Tapo App - 1 CVEs
Tapo C110 V2 - 1 CVEs
Tapo C200 - 1 CVEs
Tapo C320ws V2 - 1 CVEs
Tapo D230s1 V1.20 - 1 CVEs
Tapo H100 V1 - 1 CVEs
Tapo L535e V1.0 - 1 CVEs
Tapo P100 V1 - 1 CVEs
Tapo P300 V1.0 - 1 CVEs
Td-w8961n V4.0 - 1 CVEs
Tether App - 1 CVEs
Tl-mr100 V3.2 - 1 CVEs
Tl-mr150 V.3.2 - 1 CVEs
Tl-mr150 V3.20 - 1 CVEs
Tl-mr6400 V7 - 1 CVEs
Tl-sg108pe V5 - 1 CVEs
Tl-sg2428p 4.x - 1 CVEs
Tl-sg3428mp 5.x - 1 CVEs
Tl-sg3452p 3.0 - 1 CVEs
Tl-wa860re V4 - 1 CVEs
Tl-wl841n V13 - 1 CVEs
Tl-wr802n V4 - 1 CVEs
Tl-wr820n V2 - 1 CVEs
Tl-wr820n V2.8 - 1 CVEs
Tl-wr841n V14v14.6v14.8 - 1 CVEs
Tl-wr841nndms V9 - 1 CVEs
Tl-wr940n V4 - 1 CVEs
Tp-link Kp303 Us Smartplug - 1 CVEs
Tp-partner App - 1 CVEs
Tpcamera App - 1 CVEs
V3.0 - 1 CVEs
Vigi App - 1 CVEs
Vigi C230i Mini - 1 CVEs
Vigi C240 1.0 - 1 CVEs
Vigi C250 - 1 CVEs
Vigi C340-w 2.x Series C340-w 2.0c340-w 2.20 - 1 CVEs
Vigi C340 2.0 - 1 CVEs
Vigi C340s - 1 CVEs
Vigi C440-w 2.0 - 1 CVEs
Vigi C440 2.0 - 1 CVEs
Vigi C485 V1 - 1 CVEs
Vigi C540-4g - 1 CVEs
Vigi C540-w 2.0 - 1 CVEs
Vigi C540 2.0 - 1 CVEs
Vigi C540s Easycam C540s - 1 CVEs
Vigi C540v - 1 CVEs
Vigi Cx20 Series C320c420 - 1 CVEs
Vigi Cx20i 1.0 Series C220i 1.0c320i 1.0c420i 1.0 - 1 CVEs
Vigi Cx20i 1.20 Series C220i 1.20c320i 1.20c420i 1.20 - 1 CVEs
Vigi Cx30 1.0 Series C230 1.0c330 1.0c430 1.0 - 1 CVEs
Vigi Cx30 1.20 Series C230 1.20c330 1.20c430 1.20 - 1 CVEs
Vigi Cx30i 1.0 Series C230i 1.0c330i 1.0c430i 1.0 - 1 CVEs
Vigi Cx30i 1.20 Series C230i 1.20c330i 1.20c430i 1.20 - 1 CVEs
Vigi Cx40i 1.0 Series C240i 1.0c340i 1.0c440i 1.0 - 1 CVEs
Vigi Cx40i 1.20 Series C240i 1.20c340i 1.20c440i 1.20 - 1 CVEs
Vigi Cx45 Series C345c445 - 1 CVEs
Vigi Cx50 Series C350c450 - 1 CVEs
Vigi Cx55 Series C355c455 - 1 CVEs
Vigi Cx85 Series C385c485 - 1 CVEs
Vigi Insight S345-4g - 1 CVEs
Vigi Insight S655i - 1 CVEs
Vigi Insight Sx25 Series S225s325s425 - 1 CVEs
Vigi Insight Sx45 Series S245s345s445 - 1 CVEs
Vigi Insight Sx45zi Series S245zis345zis445zi - 1 CVEs
Vigi Insight Sx55 Series S355s455 - 1 CVEs
Vigi Insight Sx85 Series S285s385 - 1 CVEs
Vigi Insight Sx85pi Series S385pis485pi - 1 CVEs
Wi-fi Navi - 1 CVEs
Wifi Toolkit - 1 CVEs
Wr940n And Wr941nd - 1 CVEs
Eap615gp-wall 1.01.20 - 0 CVEs
Hx220us1 V1.01.0 - 0 CVEs
Tl-wr841m V14 - 0 CVEs

Newest CVEs of Tp-link Systems Inc.

CVE-2026-102816 - CVSS 5.3 (medium), 2026-10-27: An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local…
CVE-2026-102815 - CVSS 6.9 (medium), 2026-10-27: An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on…
CVE-2026-102814 - CVSS 8.7 (high), 2026-10-27: An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an…
CVE-2026-102813 - CVSS 6.1 (medium), 2026-10-27: An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker…
CVE-2026-102812 - CVSS 6.9 (medium), 2026-10-27: A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and…
CVE-2026-100420 - CVSS 6.8 (medium), 2026-10-21: A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID…
CVE-2026-89052 - CVSS 5.9 (medium), 2026-10-21: A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker…
CVE-2026-105815 - CVSS 7.1 (high), 2026-10-19: TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared…
CVE-2026-105814 - CVSS 5.3 (medium), 2026-10-19: TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and…
CVE-2026-105810 - CVSS 8.5 (high), 2026-10-19: Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the…
CVE-2026-107795 - CVSS 7.5 (high), 2026-10-14: Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an authenticated…
CVE-2026-109506 - CVSS 5.9 (medium), 2026-10-14: Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in the HTTP web-management login flow. An unauthenticated…
CVE-2026-108473 - CVSS 8.7 (high), 2026-10-14: Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send…
CVE-2026-105674 - CVSS 8.7 (high), 2026-10-08: TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the…
CVE-2026-105672 - CVSS 8.7 (high), 2026-10-08: TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the…
CVE-2026-105673 - CVSS 7.1 (high), 2026-10-08: An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is…
CVE-2026-104945 - CVSS 6.8 (medium), 2026-10-06: TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an…
CVE-2026-104944 - CVSS 7.1 (high), 2026-10-06: TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP (TP-Link Device Protocol) daemon. A single unauthenticated UDP datagram…
CVE-2026-102370 - CVSS 5.4 (medium), 2026-10-01: Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the…
CVE-2026-84682 - CVSS 7.7 (high), 2026-10-01: A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the…
CVE-2026-8618 - CVSS 7.7 (high), 2026-10-01: A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco M9 Plus due to insufficient validation of decrypted request…
CVE-2026-102369 - CVSS 8.7 (high), 2026-10-01: Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler. An…
CVE-2026-78578 - CVSS 7.1 (high), 2026-10-01: Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticated adjacent…
CVE-2026-78577 - CVSS 5.3 (medium), 2026-10-01: Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup, an unauthenticated…
CVE-2026-9032 - CVSS 7.1 (high), 2026-10-01: Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication…
CVE-2026-84941 - CVSS 6.9 (medium), 2026-09-10: An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML…
CVE-2026-17176 - CVSS 7.7 (high), 2026-09-10: An OS command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9 Plus allows an adjacent network attacker to execute arbitrary commands…
CVE-2026-76652 - CVSS 4.8 (medium), 2026-09-10: An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8. Due to…
CVE-2026-76653 - CVSS 5.3 (medium), 2026-09-10: A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper…
CVE-2026-85384 - CVSS 8.5 (high), 2026-09-08: A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when…