Vendor
TP-Link
560 known vulnerabilities in products by TP-Link, 6 of them actively exploited (CISA KEV).
Key figures
560
Vulnerabilities
6
Actively exploited (KEV)
0
Used by ransomware
110
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2025-9377 | Authenticated RCE via Parental Control command injection In CISA KEV | 7.2 | |
| Critical | CVE-2023-1389 | TP-Link Archer AX-21 Command Injection Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-33538 | TP-Link Multiple Routers Command Injection Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2020-24363 | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2015-3035 | TP-Link Multiple Archer Devices Directory Traversal Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2023-50224 | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability In CISA KEV | 6.5 | |
| Critical | CVE-2026-19586 | Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways | 9.8 | |
| High | CVE-2026-0652 | Remote Code Execution on TP-Link Tapo C260 by Guest User | 8.8 | |
| Critical | CVE-2022-37860 | TP-Link M7350 Firmware: Command Injection | 9.8 | |
| Critical | CVE-2023-36355 | TP-Link TL-WR940N Firmware: Buffer Overflow | 9.9 | |
| High | CVE-2026-1457 | Authenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385 | 8.8 | |
| High | CVE-2026-5509 | Arbitrary Command Injection via Browser Developer Console in TP-Link Archer BE450 and BE7200 | 7.2 | |
| Critical | CVE-2021-4045 | TP-LINK Tapo C200 remote code execution vulnerability | 9.8 | |
| Critical | CVE-2021-41653 | TP-Link TL-WR840N Firmware: Remote Code Execution | 9.8 | |
| Critical | CVE-2020-28347 | TP-Link Ac1750 Firmware: Code Execution | 9.8 | |
| Critical | CVE-2022-25061 | TP-Link TL-WR840N Firmware: Command Injection | 9.8 | |
| Critical | CVE-2018-11714 | TP-Link TL-WR840N Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2022-25060 | TP-Link TL-WR840N Firmware: Command Injection | 9.8 | |
| Critical | CVE-2017-8220 | TP-Link C20i Firmware 0.9.1 4.2 V0032.0 Build 160706 Release 37961N: Remote Code Execution | 9.9 | |
| Critical | CVE-2022-25064 | TP-Link TL-WR840N Firmware: Remote Code Execution | 9.8 | |
| Critical | CVE-2020-9374 | TP-Link Tl-wr849n Firmware: security vulnerability | 9.8 | |
| Critical | CVE-2013-2573 | TP-Link Tl-sc 3130g Firmware: Command Injection | 9.8 | |
| High | CVE-2026-75616 | Command Injection in Router Web Management Interface | 6.8 | |
| Critical | CVE-2022-34555 | TP-Link Tl-r473g Firmware: Remote Code Execution | 9.8 | |
| Critical | CVE-2023-39747 | TP-Link Tl-wr841n V8 Firmware: Buffer Overflow | 9.8 |