Vulnerabilities in TP-Link Systems Inc.

182 results
Vexday analysis

Com 121 CVEs catalogadas, os dispositivos TP-Link Systems Inc. apresentam taxa de exploração ativa 1,8× acima da média geral do catálogo CISA KEV, o que indica que vulnerabilidades nesse portfólio têm sido alvo de agentes maliciosos em proporção elevada. O tipo de falha mais recorrente é CWE-78 (injeção de comandos no sistema operacional), categoria que facilita execução remota de código e tende a ser explorada com relativa facilidade. O CVE mais crítico em exploração ativa no momento é CVE-2025-9377, com EPSS de 0,1175, e o surgimento de 33 novas CVEs nos últimos 90 dias sinaliza um ritmo recente de descobertas que merece acompanhamento contínuo. Equipes responsáveis por ativos TP-Link devem priorizar a aplicação de patches, especialmente em equipamentos expostos à internet, dada a combinação de exploração ativa confirmada e a prevalência de falhas de injeção de comandos.

CVE-2026-0919HIGHUnauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WSEPSS 0.6%CVE-2025-25427HIGHXSS in TP-Link TL-WR841N v14/v14.6/v14.8 Upnp pageEPSS 0.6%CVE-2026-3294HIGHAuthentication Logic Vulnerability on Multiple TP-Link Range ExtendersEPSS 0.6%CVE-2026-30814HIGHBuffer Overflow Vulnerability in TP-Link AX53EPSS 0.6%CVE-2025-62673HIGHHeap-based Buffer Overflow Vulnerability in Archer AX53 and AX12EPSS 0.6%CVE-2025-8065HIGHRemote Code Execution via Stack-based Buffer Overflow in ONVIF SOAP Parser in TP-Link Tapo C200 and C520WSEPSS 0.5%CVE-2026-12339MEDIUMAuthenticated Arbitrary File Write Vulnerability in multiple devicesEPSS 0.5%CVE-2026-34118HIGHHeap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C100, C101 & C520WSEPSS 0.5%CVE-2025-9014MEDIUMNull Pointer Dereference Vulnerability on TL-WR841NEPSS 0.5%CVE-2026-34121HIGHAuthentication Bypass in DS Configuration Service via HTTP Request Parsing Differential of TP-Link Tapo C520WSEPSS 0.5%CVE-2026-76653MEDIUMMissing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR600EPSS 0.5%CVE-2026-84941MEDIUMOmada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File ReadEPSS 0.5%CVE-2026-17251HIGHUnauthenticated Denial of Service via Null Pointer Dereference in HTTP Request ParsingEPSS 0.5%CVE-2025-62405HIGHHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX53EPSS 0.5%CVE-2025-62404HIGHHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX53EPSS 0.5%CVE-2025-61983HIGHHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX53EPSS 0.5%CVE-2025-62501HIGHSSH Hostkey Misconfiguration Vulnerability in TP-Link Archer AX53EPSS 0.5%CVE-2026-10562MEDIUMUnauthenticated Open Redirect Vulnerability on TP-Link Archer AX20 Web InterfaceEPSS 0.5%CVE-2025-15545HIGHInsufficient Backup File Upload Input Validation on TP-Link Archer RE605XEPSS 0.4%CVE-2025-9520HIGHIDOR Leading to Owner Account Hijacking in Omada ControllerEPSS 0.4%