[ Vendor · 21 CVEs ]
TP-Link Systems Inc.
CVEs affecting TP-Link Systems Inc. published in the last 30 days, plus any TP-Link Systems Inc. CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-89052 | 21 Oct 2026 | CVSS 5.9 | TP-Link Systems Inc. Archer C6 V2A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An… | |
| CVE-2026-100420 | 21 Oct 2026 | CVSS 6.8 | TP-Link Systems Inc. Deco BE63 V2.0A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext… | |
| CVE-2026-105814 | 19 Oct 2026 | CVSS 5.3 | TP-Link Systems Inc. Tapo C210 v3.6TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected… | |
| CVE-2026-105815 | 19 Oct 2026 | CVSS 7.1 | TP-Link Systems Inc. Tapo C210 v3.6TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed… | |
| CVE-2026-105810 | 19 Oct 2026 | CVSS 8.5 | TP-Link Systems Inc. Tapo C320WS v2Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on… | |
| CVE-2026-107795 | 14 Oct 2026 | CVSS 7.5 | TP-Link Systems Inc. Omada Software ControllerOmada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an… | |
| CVE-2026-109506 | 14 Oct 2026 | CVSS 5.9 | TP-Link Systems Inc. RE190 v5Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in the HTTP web-management login flow. An… | |
| CVE-2026-108473 | 14 Oct 2026 | CVSS 8.7 | TP-Link Systems Inc. HS103 v5Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker… | |
| CVE-2026-105672 | 8 Oct 2026 | CVSS 8.7 | TP-Link Systems Inc. Tapo C325WB v2TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker… | |
| CVE-2026-105673 | 8 Oct 2026 | CVSS 7.1 | TP-Link Systems Inc. Tapo C325WB v2An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account… | |
| CVE-2026-105674 | 8 Oct 2026 | CVSS 8.7 | TP-Link Systems Inc. Tapo C325WB v2TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator… | |
| CVE-2026-104944 | 6 Oct 2026 | CVSS 7.1 | TP-Link Systems Inc. Tapo C500 v2.0TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP (TP-Link Device Protocol) daemon. A single unauthenticated UDP… | |
| CVE-2026-104945 | 6 Oct 2026 | CVSS 6.8 | TP-Link Systems Inc. Tapo C500 v2.0TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit… | |
| CVE-2026-102370 | 1 Oct 2026 | CVSS 5.4 | TP-Link Systems Inc. Kasa EC70 V4Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader… | |
| CVE-2026-8618 | 1 Oct 2026 | CVSS 7.7 | TP-Link Systems Inc. Deco M9 Plus V2A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco M9 Plus due to insufficient validation of decrypted… | |
| CVE-2026-84682 | 1 Oct 2026 | CVSS 7.7 | TP-Link Systems Inc. Archer AX90 v1A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adjacent-network attacker can… | |
| CVE-2026-9032 | 1 Oct 2026 | CVSS 7.1 | TP-Link Systems Inc. Tapo C200 V5Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without… | |
| CVE-2026-78577 | 1 Oct 2026 | CVSS 5.3 | TP-Link Systems Inc. Tapo C200 v5Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup, an… | |
| CVE-2026-78578 | 1 Oct 2026 | CVSS 7.1 | TP-Link Systems Inc. Tapo C200 v5Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticated… | |
| CVE-2026-102369 | 1 Oct 2026 | CVSS 8.7 | TP-Link Systems Inc. Tapo C200 v5Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler. An… | |
| CVE-2025-9377 | 29 Aug 2025 | CVSS 7.2 | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command InjectionThe authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS)… | Exploited |