Vendor
TP-Link vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 142 vulnerabilities in TP-Link: 1 in the last 7 days and 59 in the last 90 days, 14 of them critical and 10 exploited in the wild. The most recent, CVE-2026-109683, was published on 6 November 2026. 16 vulnerabilities in the last four weeks, up 7% on the four before (15). 54 technologies have a page of their own.
- Last 7 days
- 1
- Last 90 days
- 59
- Critical, all time
- 14
- Exploited in the wild
- 10
About TP-Link
A global provider of consumer and business networking products, including routers, switches, and wireless equipment.
TP-Link technologies
- TP-Link Tapo C520WS13
- TP-Link TL-WR841N10
- TP-Link Tapo C2009
- TP-Link Archer AX538
- TP-Link Archer Ax53 Firmware8
- TP-Link Multiple Routers6
- TP-Link Tapo C520WS firmware6
- TP-Link TL-MR64006
- TP-Link Archer BE2305
- TP-Link Archer Be230 Firmware5
- TP-Link Archer MR6005
- TP-Link Tapo C1205
- TP-Link Archer BE36004
- TP-Link Deco BE234
- TP-Link Deco BE254
- TP-Link Deco BE654
- TP-Link Deco BE65 Pro4
- TP-Link Deco BE854
- TP-Link Er6054
- TP-Link Er605 Firmware4
- TP-Link Er706w4
- TP-Link Er706w-4g4
- TP-Link Er706w-4g Firmware4
- TP-Link Er706w Firmware4
- TP-Link Er707-M24
- TP-Link Er707-M2 Firmware4
- TP-Link Er72064
- TP-Link Er7206 Firmware4
- TP-Link Er7212pc4
- TP-Link Er7212pc Firmware4
- TP-Link Er7412-M24
- TP-Link Er7412-M2 Firmware4
- TP-Link Er84114
- TP-Link Er8411 Firmware4
- TP-Link Fr2054
- TP-Link Fr205 Firmware4
- TP-Link Fr307-M24
- TP-Link Fr307-M2 Firmware4
- TP-Link Fr3654
- TP-Link Fr365 Firmware4
- TP-Link G364
- TP-Link G36 Firmware4
- TP-Link G6114
- TP-Link G611 Firmware4
- TP-Link RE3054
- TP-Link Archer AX553
- TP-Link Archer C73
- TP-Link Archer VX1800v3
- TP-Link Deco BE65-PoE3
- TP-Link Kasa EC703
- TP-Link Kasa EC713
- TP-Link Omada3
- TP-Link Tapo C1003
- TP-Link TL-WR940N3
Latest TP-Link vulnerabilities
- CVE-2026-109683: TP-Link Archer BE805 UPnP newline injectioninfo
- CVE-2026-118865: TP-Link Archer AX3000 v2 authenticated OS command injectioninfo
- CVE-2026-105822: TP-Link Tapo Cloud MQTT Proxy server-side request forgeryinfo
- CVE-2026-105821: TP-Link Tapo Cloud MQTT broken access control in proxyinfo
- CVE-2026-102816: TP-Link RE305 V3 authorization bypass in regulatory region configurationinfo
- CVE-2026-102815: TP-Link RE305 V3 command injection in tmpServerinfo
- CVE-2026-102814: TP-Link RE305 V3 authentication bypass in TDDP v2 serviceinfo
- CVE-2026-102813: TP-Link RE305 V3 authentication bypass in password recoveryinfo
- CVE-2026-102812: TP-Link RE305 V3 and Archer C7 V5 hardcoded cryptographic keyinfo
- CVE-2026-89052: TP-Link Archer C6 hardcoded encryption key credential disclosureinfo
- CVE-2026-100420: TP-Link Deco BE63 plaintext password disclosure in cloud-client daemoninfo
- CVE-2026-105815: TP-Link Tapo C210 credential exposure in DS JSON APIinfo
- CVE-2026-105814: TP-Link Tapo C210 authentication bypass in DS JSON APIinfo
- CVE-2026-105810: TP-Link Tapo C320WS stack buffer overflow in Wi-Fi configurationinfo
- CVE-2026-102298: TP-Link Omada Controller authorization bypass in MSP modeinfoEPSS 0.4%
- CVE-2026-108473: TP-Link Kasa devices improper authentication in device-management protocolinfoEPSS 0.3%
- CVE-2026-105674: TP-Link Tapo C325WB V2 weak PSK generation in media streaminginfoEPSS 0.2%
- CVE-2026-105673: TP-Link Tapo C325WB denial of service in RTSP streaminginfoEPSS 0.2%
- CVE-2026-105672: TP-Link Tapo C325WB V2 authorization bypass in JSON APIinfoEPSS 0.3%
- CVE-2026-102368: TP-Link Tapo S505 plaintext cryptographic key storageinfoEPSS 0.1%
- CVE-2026-104945: TP-Link Tapo C500 v2.0 out-of-bounds stack write in ONVIF PTZinfo
- CVE-2026-104944: TP-Link Tapo C500 out-of-bounds function-pointer dispatch in TDP daemoninfo
- CVE-2026-102370: TP-Link Kasa EC70 and EC71 v4 debug interface and bootloader bypassinfoEPSS 0.2%
- CVE-2026-8618: TP-Link Deco M9 Plus stack buffer overflow in TDDPv2infoEPSS 0.2%
- CVE-2026-84682: TP-Link Archer AX90 command injection in TDDPv2infoEPSS 1.0%
Most severe TP-Link vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2018-6530: D-Link Multiple Routers OS Command Injection Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2021-45382: D-Link Multiple Routers Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2019-16920: D-Link Multiple Routers Command Injection Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2023-33538: TP-Link Multiple Routers command injection in WlanNetworkRpmcriticalexploited in the wildCVSS 8.8EPSS 90.6%
- CVE-2020-24363: TP-Link TL-WA855RE missing authentication for factory resetcriticalexploited in the wildCVSS 8.8EPSS 12.6%
- CVE-2023-1389: TP-Link Archer AX-21 Command Injection Vulnerabilitycriticalexploited in the wildCVSS 8.8
- CVE-2016-6277: NETGEAR Multiple Routers Remote Code Execution Vulnerabilitycriticalexploited in the wildCVSS 8.8
- CVE-2015-3035: TP-Link Multiple Archer Devices Directory Traversal Vulnerabilitycriticalexploited in the wildCVSS 7.5
- CVE-2025-9377: TP-Link Archer C7 and TL-WR841N OS command injection in Parental Controlcriticalexploited in the wildCVSS 7.2EPSS 30.9%
- CVE-2023-50224: TP-Link TL-WR841N authentication bypass in httpd servicecriticalexploited in the wildCVSS 6.5EPSS 1.5%
Vulnerabilities per week
16 vulnerabilities in the last four weeks, up 7% on the four before (15). The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 11 | 1 | |
| 24 Aug 2026 | 9 | 0 | |
| 31 Aug 2026 | 2 | 0 | |
| 7 Sep 2026 | 6 | 0 | |
| 14 Sep 2026 | 1 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 8 | 0 | |
| 5 Oct 2026 | 6 | 0 | |
| 12 Oct 2026 | 2 | 0 | |
| 19 Oct 2026 | 5 | 0 | |
| 26 Oct 2026 | 5 | 0 | |
| 2 Nov 2026 | 4 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many TP-Link vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/tp-link)<a href="https://junglewise.ai/threats/vendors/tp-link"><img src="https://junglewise.ai/threats/vendors/tp-link/badge.svg" alt="TP-Link vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/tp-link.json, and this page as text at https://junglewise.ai/threats/vendors/tp-link.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "TP-Link vulnerabilities", https://junglewise.ai/threats/vendors/tp-link, 13 November 2026.