tp-link Vulnerability Advisory Catalog

Total 520 security vulnerabilities recorded for tp-link software and firmware.

← Back to All Vendors
Component: tapo_c200_firmware

The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attac...

๐Ÿ“… 2025-12-20
CVSS 6.5 Dossier →
Component: tl-wa850re_firmware

Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issu...

๐Ÿ“… 2025-12-18
CVSS 7.5 Dossier →
Component: tl-wa850re_firmware

Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This issue affe...

๐Ÿ“… 2025-12-18
CVSS 8.0 Dossier →
CVE-2025-7851 CRITICAL
Component: fr307-m2_firmware

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways....

๐Ÿ“… 2025-10-21
CVSS 9.8 Dossier →
Component: er8411_firmware

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways....

๐Ÿ“… 2025-10-21
CVSS 7.2 Dossier →
CVE-2025-6542 CRITICAL
Component: er8411_firmware

An arbitrary OS command may be executed on the product by a remote unauthenticated attacker....

๐Ÿ“… 2025-10-21
CVSS 9.8 Dossier →
Component: er706w_firmware

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface....

๐Ÿ“… 2025-10-21
CVSS 8.8 Dossier →
Component: tl-wr841n_firmware

The authenticated remote command execution (RCE) vulnerability exists in the Parental Control pageย onย TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V...

๐Ÿ“… 2025-08-29
CVSS 7.2 Dossier →
Component: kp303_firmware

The TP-Link KP303 Smartplugย can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information le...

๐Ÿ“… 2025-08-25
CVSS 8.8 Dossier →
Component: tl-wr841n_firmware

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/Wan6to4TunnelCfgRpm.htm file due to missing input pa...

๐Ÿ“… 2025-07-29
CVSS 7.5 Dossier →
Component: tl-wr841n_firmware

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WzdWlanSiteSurveyRpm_AP.htm file due to missing inpu...

๐Ÿ“… 2025-07-29
CVSS 7.5 Dossier →
Component: tl-wr841n_firmware

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_APC.htm file due to missing input par...

๐Ÿ“… 2025-07-29
CVSS 7.5 Dossier →
Component: tl-wr841n_firmware

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_AP.htm file due to missing input para...

๐Ÿ“… 2025-07-29
CVSS 7.5 Dossier →
Component: tl-wr841n_firmware

A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3. The vulnerability exists in the /userRpm/WlanNetworkRpm.htm f...

๐Ÿ“… 2025-07-29
CVSS 7.5 Dossier →
CVE-2025-6151 UNKNOWN
Component: tl-wr940n_firmware

A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown functionality of the file /userRpm/...

๐Ÿ“… 2025-06-17
Component: tl-ipc544ep-w4_firmware

A vulnerability classified as critical has been found in TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 69493n. Affected is the function s...

๐Ÿ“… 2025-06-09
CVSS 8.8 Dossier →
Component: wr841n_firmware

A stored cross-site scripting (XSS) vulnerability in the upnp.htm page of the web Interface in TP-Link WR841N v14/v14.6/v14.8 <= Build 241230 Rel. 507...

๐Ÿ“… 2025-04-18
CVSS 5.4 Dossier →
CVE-2024-57040 CRITICAL
Component: tl-wr845n_firmware

TP-Link TL-WR845N devices with firmware TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the roo...

๐Ÿ“… 2025-02-26
CVSS 9.8 Dossier →
Component: tl-wr841nd_firmware

A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the dnsserver1 and dnsserver2 parameters at /userRpm/WanSlaacCf...

๐Ÿ“… 2025-02-13
CVSS 7.5 Dossier →
Component: tl-wr841nd_v11_firmware

A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the username and password parameters at /userRpm/PPPoEv6CfgRpm.htm. This ...

๐Ÿ“… 2025-02-13
CVSS 4.9 Dossier →
Component: tl-wr841nd_v11_firmware

A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter at /userRpm/WanDynamicIpV6CfgRpm.htm. This vulnerabili...

๐Ÿ“… 2025-02-13
CVSS 3.5 Dossier →
Component: tl-wr841nd_firmware

A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret parameter at /userRpm/WlanSecurityRpm.htm. This vulnerabili...

๐Ÿ“… 2025-02-13
CVSS 7.5 Dossier →
Component: tl-wr841nd_firmware

A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIpV6CfgRpm.htm. This vulnerabilit...

๐Ÿ“… 2025-02-13
CVSS 7.5 Dossier →
Component: tl-wpa8630_firmware

An issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub_4256CC, whic...

๐Ÿ“… 2025-02-07
CVSS 8.0 Dossier →
Page 5 of 22 (520 Total Records)