# TP-Link vulnerabilities

Source: https://junglewise.ai/threats/vendors/tp-link  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/tp-link.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 142 vulnerabilities in TP-Link: 1 in the last 7 days and 59 in the last 90 days, 14 of them critical and 10 exploited in the wild. The most recent, CVE-2026-109683, was published on 6 November 2026. 16 vulnerabilities in the last four weeks, up 7% on the four before (15). 54 technologies have a page of their own.

## Counts

- Last 7 days: 1
- Last 30 days: 15
- Last 90 days: 59
- All time: 142 (14 critical, 10 exploited in the wild)

## About TP-Link

A global provider of consumer and business networking products, including routers, switches, and wireless equipment.

## Latest TP-Link vulnerabilities

- [CVE-2026-109683: TP-Link Archer BE805 UPnP newline injection](https://junglewise.ai/threats/cve-2026-109683-a-newline-injection-vulnerability-exists-in-the-upnp-service-of) (info, published 6 Nov 2026)
- [CVE-2026-118865: TP-Link Archer AX3000 v2 authenticated OS command injection](https://junglewise.ai/threats/cve-2026-118865-an-authenticated-os-command-injection-vulnerability-exists-in) (info, published 3 Nov 2026)
- [CVE-2026-105822: TP-Link Tapo Cloud MQTT Proxy server-side request forgery](https://junglewise.ai/threats/cve-2026-105822-the-tapo-cloud-mqtt-proxy-contains-a-server-side-request-forgery) (info, published 3 Nov 2026)
- [CVE-2026-105821: TP-Link Tapo Cloud MQTT broken access control in proxy](https://junglewise.ai/threats/cve-2026-105821-the-tapo-cloud-mqtt-broker-contains-a-broken-access-control) (info, published 3 Nov 2026)
- [CVE-2026-102816: TP-Link RE305 V3 authorization bypass in regulatory region configuration](https://junglewise.ai/threats/cve-2026-102816-an-authorization-vulnerability-exists-in-the-country-or-region) (info, published 27 Oct 2026)
- [CVE-2026-102815: TP-Link RE305 V3 command injection in tmpServer](https://junglewise.ai/threats/cve-2026-102815-an-operating-system-command-injection-vulnerability-exists-in) (info, published 27 Oct 2026)
- [CVE-2026-102814: TP-Link RE305 V3 authentication bypass in TDDP v2 service](https://junglewise.ai/threats/cve-2026-102814-an-authentication-weakness-exists-in-the-tp-link-tddp-v2-service) (info, published 27 Oct 2026)
- [CVE-2026-102813: TP-Link RE305 V3 authentication bypass in password recovery](https://junglewise.ai/threats/cve-2026-102813-an-authentication-flaw-exists-in-the-password-recovery) (info, published 27 Oct 2026)
- [CVE-2026-102812: TP-Link RE305 V3 and Archer C7 V5 hardcoded cryptographic key](https://junglewise.ai/threats/cve-2026-102812-a-hard-coded-cryptographic-key-vulnerability-exists-in-the-user) (info, published 27 Oct 2026)
- [CVE-2026-89052: TP-Link Archer C6 hardcoded encryption key credential disclosure](https://junglewise.ai/threats/cve-2026-89052-a-hardcoded-cryptographic-key-management-vulnerability-exists-in) (info, published 21 Oct 2026)
- [CVE-2026-100420: TP-Link Deco BE63 plaintext password disclosure in cloud-client daemon](https://junglewise.ai/threats/cve-2026-100420-a-sensitive-information-disclosure-vulnerability-in-the-cloud) (info, published 21 Oct 2026)
- [CVE-2026-105815: TP-Link Tapo C210 credential exposure in DS JSON API](https://junglewise.ai/threats/cve-2026-105815-tp-link-tapo-c210-v3-60-may-expose-shared-credential-material) (info, published 19 Oct 2026)
- [CVE-2026-105814: TP-Link Tapo C210 authentication bypass in DS JSON API](https://junglewise.ai/threats/cve-2026-105814-tp-link-tapo-c210-v3-60-contains-an-authentication-bypass) (info, published 19 Oct 2026)
- [CVE-2026-105810: TP-Link Tapo C320WS stack buffer overflow in Wi-Fi configuration](https://junglewise.ai/threats/cve-2026-105810-tapo-c320ws-v2-0-contains-an-authenticated-stack-based-buffer) (info, published 19 Oct 2026)
- [CVE-2026-102298: TP-Link Omada Controller authorization bypass in MSP mode](https://junglewise.ai/threats/cve-2026-102298-in-omada-controller-msp-mode-the-user-confirmation-endpoint) (info, published 14 Oct 2026)
- [CVE-2026-108473: TP-Link Kasa devices improper authentication in device-management protocol](https://junglewise.ai/threats/cve-2026-108473-multiple-kasa-devices-contain-an-improper-authentication) (info, published 14 Oct 2026)
- [CVE-2026-105674: TP-Link Tapo C325WB V2 weak PSK generation in media streaming](https://junglewise.ai/threats/cve-2026-105674-tp-link-tapo-c325wb-v2-generates-the-pre-shared-key-used-by-its) (info, published 8 Oct 2026)
- [CVE-2026-105673: TP-Link Tapo C325WB denial of service in RTSP streaming](https://junglewise.ai/threats/cve-2026-105673-an-unauthenticated-denial-of-service-vulnerability-exists-in) (info, published 8 Oct 2026)
- [CVE-2026-105672: TP-Link Tapo C325WB V2 authorization bypass in JSON API](https://junglewise.ai/threats/cve-2026-105672-tp-link-tapo-c325wb-v2-contains-an-unauthenticated-authorization) (info, published 8 Oct 2026)
- [CVE-2026-102368: TP-Link Tapo S505 plaintext cryptographic key storage](https://junglewise.ai/threats/cve-2026-102368-affected-tapo-device-firmware-stores-device-specific) (info, published 8 Oct 2026)
- [CVE-2026-104945: TP-Link Tapo C500 v2.0 out-of-bounds stack write in ONVIF PTZ](https://junglewise.ai/threats/cve-2026-104945-tp-link-tapo-c500-v2-0-contains-an-out-of-bounds-stack-write) (info, published 6 Oct 2026)
- [CVE-2026-104944: TP-Link Tapo C500 out-of-bounds function-pointer dispatch in TDP daemon](https://junglewise.ai/threats/cve-2026-104944-tp-link-tapo-c500-v2-0-contains-an-out-of-bounds-function) (info, published 6 Oct 2026)
- [CVE-2026-102370: TP-Link Kasa EC70 and EC71 v4 debug interface and bootloader bypass](https://junglewise.ai/threats/cve-2026-102370-kasa-ec70-v4-and-ec71-v4-do-not-logically-disable-the-production) (info, published 1 Oct 2026)
- [CVE-2026-8618: TP-Link Deco M9 Plus stack buffer overflow in TDDPv2](https://junglewise.ai/threats/cve-2026-8618-a-stack-based-buffer-overflow-vulnerability-exists-in-the-tddpv2) (info, published 1 Oct 2026)
- [CVE-2026-84682: TP-Link Archer AX90 command injection in TDDPv2](https://junglewise.ai/threats/cve-2026-84682-a-command-injection-vulnerability-exists-in-the-tddpv2-service) (info, published 1 Oct 2026)

## Most severe TP-Link vulnerabilities

- [CVE-2018-6530: D-Link Multiple Routers OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2018-6530-d-link-multiple-routers-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 8 Sep 2022)
- [CVE-2021-45382: D-Link Multiple Routers Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-45382-d-link-multiple-routers-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 4 Apr 2022)
- [CVE-2019-16920: D-Link Multiple Routers Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-16920-d-link-multiple-routers-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022)
- [CVE-2023-33538: TP-Link Multiple Routers command injection in WlanNetworkRpm](https://junglewise.ai/threats/cve-2023-33538-tp-link-multiple-routers-command-injection-in-wlannetworkrpm) (critical, exploited in the wild, CVSS 8.8, published 16 Jun 2025)
- [CVE-2020-24363: TP-Link TL-WA855RE missing authentication for factory reset](https://junglewise.ai/threats/cve-2020-24363-tp-link-tl-wa855re-missing-authentication-for-factory-reset) (critical, exploited in the wild, CVSS 8.8, published 2 Sep 2025)
- [CVE-2023-1389: TP-Link Archer AX-21 Command Injection Vulnerability](https://junglewise.ai/threats/cve-2023-1389-tp-link-archer-ax-21-command-injection-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 1 May 2023)
- [CVE-2016-6277: NETGEAR Multiple Routers Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-6277-netgear-multiple-routers-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 7 Mar 2022)
- [CVE-2015-3035: TP-Link Multiple Archer Devices Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2015-3035-tp-link-multiple-archer-devices-directory-traversal-vulnerability) (critical, exploited in the wild, CVSS 7.5, published 25 Mar 2022)
- [CVE-2025-9377: TP-Link Archer C7 and TL-WR841N OS command injection in Parental Control](https://junglewise.ai/threats/cve-2025-9377-tp-link-archer-c7-and-tl-wr841n-os-command-injection-in-parental) (critical, exploited in the wild, CVSS 7.2, published 3 Sep 2025)
- [CVE-2023-50224: TP-Link TL-WR841N authentication bypass in httpd service](https://junglewise.ai/threats/cve-2023-50224-tp-link-tl-wr841n-authentication-bypass-in-httpd-service) (critical, exploited in the wild, CVSS 6.5, published 3 Sep 2025)

## Vulnerabilities per week

16 vulnerabilities in the last four weeks, up 7% on the four before (15).

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 11 | 1 | 0 |
| 24 Aug 2026 | 9 | 0 | 0 |
| 31 Aug 2026 | 2 | 0 | 0 |
| 7 Sep 2026 | 6 | 0 | 0 |
| 14 Sep 2026 | 1 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 8 | 0 | 0 |
| 5 Oct 2026 | 6 | 0 | 0 |
| 12 Oct 2026 | 2 | 0 | 0 |
| 19 Oct 2026 | 5 | 0 | 0 |
| 26 Oct 2026 | 5 | 0 | 0 |
| 2 Nov 2026 | 4 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## TP-Link technologies

- [TP-Link Tapo C520WS](https://junglewise.ai/threats/technologies/tapo-c520ws): 13 vulnerabilities
- [TP-Link TL-WR841N](https://junglewise.ai/threats/technologies/tl-wr841n): 10 vulnerabilities
- [TP-Link Tapo C200](https://junglewise.ai/threats/technologies/tapo-c200): 9 vulnerabilities
- [TP-Link Archer AX53](https://junglewise.ai/threats/technologies/archer-ax53): 8 vulnerabilities
- [TP-Link Archer Ax53 Firmware](https://junglewise.ai/threats/technologies/archer-ax53-firmware): 8 vulnerabilities
- [TP-Link Multiple Routers](https://junglewise.ai/threats/technologies/multiple-routers): 6 vulnerabilities
- [TP-Link Tapo C520WS firmware](https://junglewise.ai/threats/technologies/tapo-c520ws-firmware): 6 vulnerabilities
- [TP-Link TL-MR6400](https://junglewise.ai/threats/technologies/tl-mr6400): 6 vulnerabilities
- [TP-Link Archer BE230](https://junglewise.ai/threats/technologies/archer-be230): 5 vulnerabilities
- [TP-Link Archer Be230 Firmware](https://junglewise.ai/threats/technologies/archer-be230-firmware): 5 vulnerabilities
- [TP-Link Archer MR600](https://junglewise.ai/threats/technologies/archer-mr600): 5 vulnerabilities
- [TP-Link Tapo C120](https://junglewise.ai/threats/technologies/tapo-c120): 5 vulnerabilities
- [TP-Link Archer BE3600](https://junglewise.ai/threats/technologies/archer-be3600): 4 vulnerabilities
- [TP-Link Deco BE23](https://junglewise.ai/threats/technologies/deco-be23): 4 vulnerabilities
- [TP-Link Deco BE25](https://junglewise.ai/threats/technologies/deco-be25): 4 vulnerabilities
- [TP-Link Deco BE65](https://junglewise.ai/threats/technologies/deco-be65): 4 vulnerabilities
- [TP-Link Deco BE65 Pro](https://junglewise.ai/threats/technologies/deco-be65-pro): 4 vulnerabilities
- [TP-Link Deco BE85](https://junglewise.ai/threats/technologies/deco-be85): 4 vulnerabilities
- [TP-Link Er605](https://junglewise.ai/threats/technologies/er605): 4 vulnerabilities
- [TP-Link Er605 Firmware](https://junglewise.ai/threats/technologies/er605-firmware): 4 vulnerabilities
- [TP-Link Er706w](https://junglewise.ai/threats/technologies/er706w): 4 vulnerabilities
- [TP-Link Er706w-4g](https://junglewise.ai/threats/technologies/er706w-4g): 4 vulnerabilities
- [TP-Link Er706w-4g Firmware](https://junglewise.ai/threats/technologies/er706w-4g-firmware): 4 vulnerabilities
- [TP-Link Er706w Firmware](https://junglewise.ai/threats/technologies/er706w-firmware): 4 vulnerabilities
- [TP-Link Er707-M2](https://junglewise.ai/threats/technologies/er707-m2): 4 vulnerabilities
- [TP-Link Er707-M2 Firmware](https://junglewise.ai/threats/technologies/er707-m2-firmware): 4 vulnerabilities
- [TP-Link Er7206](https://junglewise.ai/threats/technologies/er7206): 4 vulnerabilities
- [TP-Link Er7206 Firmware](https://junglewise.ai/threats/technologies/er7206-firmware): 4 vulnerabilities
- [TP-Link Er7212pc](https://junglewise.ai/threats/technologies/er7212pc): 4 vulnerabilities
- [TP-Link Er7212pc Firmware](https://junglewise.ai/threats/technologies/er7212pc-firmware): 4 vulnerabilities
- [TP-Link Er7412-M2](https://junglewise.ai/threats/technologies/er7412-m2): 4 vulnerabilities
- [TP-Link Er7412-M2 Firmware](https://junglewise.ai/threats/technologies/er7412-m2-firmware): 4 vulnerabilities
- [TP-Link Er8411](https://junglewise.ai/threats/technologies/er8411): 4 vulnerabilities
- [TP-Link Er8411 Firmware](https://junglewise.ai/threats/technologies/er8411-firmware): 4 vulnerabilities
- [TP-Link Fr205](https://junglewise.ai/threats/technologies/fr205): 4 vulnerabilities
- [TP-Link Fr205 Firmware](https://junglewise.ai/threats/technologies/fr205-firmware): 4 vulnerabilities
- [TP-Link Fr307-M2](https://junglewise.ai/threats/technologies/fr307-m2): 4 vulnerabilities
- [TP-Link Fr307-M2 Firmware](https://junglewise.ai/threats/technologies/fr307-m2-firmware): 4 vulnerabilities
- [TP-Link Fr365](https://junglewise.ai/threats/technologies/fr365): 4 vulnerabilities
- [TP-Link Fr365 Firmware](https://junglewise.ai/threats/technologies/fr365-firmware): 4 vulnerabilities
- [TP-Link G36](https://junglewise.ai/threats/technologies/g36): 4 vulnerabilities
- [TP-Link G36 Firmware](https://junglewise.ai/threats/technologies/g36-firmware): 4 vulnerabilities
- [TP-Link G611](https://junglewise.ai/threats/technologies/g611): 4 vulnerabilities
- [TP-Link G611 Firmware](https://junglewise.ai/threats/technologies/g611-firmware): 4 vulnerabilities
- [TP-Link RE305](https://junglewise.ai/threats/technologies/re305): 4 vulnerabilities
- [TP-Link Archer AX55](https://junglewise.ai/threats/technologies/archer-ax55): 3 vulnerabilities
- [TP-Link Archer C7](https://junglewise.ai/threats/technologies/archer-c7): 3 vulnerabilities
- [TP-Link Archer VX1800v](https://junglewise.ai/threats/technologies/archer-vx1800v): 3 vulnerabilities
- [TP-Link Deco BE65-PoE](https://junglewise.ai/threats/technologies/deco-be65-poe): 3 vulnerabilities
- [TP-Link Kasa EC70](https://junglewise.ai/threats/technologies/kasa-ec70): 3 vulnerabilities
- [TP-Link Kasa EC71](https://junglewise.ai/threats/technologies/kasa-ec71): 3 vulnerabilities
- [TP-Link Omada](https://junglewise.ai/threats/technologies/omada): 3 vulnerabilities
- [TP-Link Tapo C100](https://junglewise.ai/threats/technologies/tapo-c100): 3 vulnerabilities
- [TP-Link TL-WR940N](https://junglewise.ai/threats/technologies/tl-wr940n): 3 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "TP-Link vulnerabilities", https://junglewise.ai/threats/vendors/tp-link, 13 November 2026.