Vulnerabilities in TP-Link Systems Inc.
211 resultsCVE-2025-4975MEDIUMTapo privilege escalation on shared devices using notificationsEPSS 0.2%CVE-2026-34123HIGHWhitelist Validation Bypass in TP-Link Tapo C520WSEPSS 0.2%CVE-2025-15605HIGHHardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600EPSS 0.1%CVE-2026-5040HIGHWeak Password Hashing Mechanism in TP-Link Deco M5EPSS 0.1%CVE-2026-5039MEDIUMPredictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841NEPSS 0.1%CVE-2026-4346MEDIUMCleartext Storage of Administrative and Wi-Fi Credentials via Accessible Serial Interface in TP Link's TL-WR850NEPSS 0.1%CVE-2026-102812MEDIUMHardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7EPSS 0.1%CVE-2026-34126HIGHBluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100CEPSS 0.1%CVE-2026-5363MEDIUMUse of weak cryptographic key in TP-Link Archer C7EPSS 0.1%CVE-2025-15548MEDIUMMissing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800vEPSS 0.1%CVE-2026-109683MEDIUMUPnP Newline Injection Vulnerability in TP-Link Archer BE805EPSS —