Tp-Link vulnerabilities
112 published CVEs name Tp-Link among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 112
- Last 12 months
- 1
- Critical
- 9
- Known exploited
- 1
Critical 9High 71Medium 32Low 0Not scored 0
CVEs per yearBy the year they were published
- 20184
- 202010
- 20213
- 20228
- 202325
- 202456
- 20255
- 20261
Known exploitedNewest addition to KEV first
- CVE-2023-50224
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
TP-Link · TL-WR841N
ExploitedMedium6.5
Newest CVEs
- CVE-2018-25321
TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)
Tp-link · TL-WR720NMbps Wireless N Router
Medium5.3 - CVE-2025-40634
Stack-based buffer overflow in TP-Link Archer AX50
TP-Link · Link Archer AX50
Critical9.2 - CVE-2025-3442
Information Disclosure Vulnerability in TP-Link Tapo IoT Smart Hub
TP-Link · Tapo H200 V1 IoT Smart Hub
Medium4.4 - CVE-2025-1099
Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera
TP-Link · Tapo C500 V1 Wi-Fi Camera
High7.0 - CVE-2025-0730
TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings
TP-Link · TL-SG108E
Medium6.3 - CVE-2025-0729
TP-Link TL-SG108E clickjacking
TP-Link · TL-SG108E
Medium6.9 - CVE-2024-12344
TP-Link VN020 F3v(T) FTP USER Command memory corruption
TP-Link · VN020 F3v(T)
Medium5.3 - CVE-2024-12343
TP-Link VN020 F3v(T) SOAP Request WANIPConnection buffer overflow
TP-Link · VN020 F3v(T)
High7.1 - CVE-2024-12342
TP-Link VN020 F3v(T) Incomplete SOAP Request WANIPConnection denial of service
TP-Link · VN020 F3v(T)
High7.1 - CVE-2024-54127
Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50
TP-Link · Archer C50 Wireless Router
Medium4.3
Products with the most CVEs
Most common weaknesses
- CWE-78 OS command injection30
- CWE-121 Stack-based buffer overflow27
- CWE-787 Out-of-bounds write17
- CWE-77 Command injection5
- CWE-287 Improper authentication4
- CWE-404 4
- CWE-119 Memory buffer bounds error3
- CWE-120 Classic buffer overflow3
- CWE-20 Improper input validation3
- CWE-312 Cleartext storage of sensitive information3