Vulnerabilities in TP-Link Systems Inc.

182 results
Vexday analysis

Com 121 CVEs catalogadas, os dispositivos TP-Link Systems Inc. apresentam taxa de exploração ativa 1,8× acima da média geral do catálogo CISA KEV, o que indica que vulnerabilidades nesse portfólio têm sido alvo de agentes maliciosos em proporção elevada. O tipo de falha mais recorrente é CWE-78 (injeção de comandos no sistema operacional), categoria que facilita execução remota de código e tende a ser explorada com relativa facilidade. O CVE mais crítico em exploração ativa no momento é CVE-2025-9377, com EPSS de 0,1175, e o surgimento de 33 novas CVEs nos últimos 90 dias sinaliza um ritmo recente de descobertas que merece acompanhamento contínuo. Equipes responsáveis por ativos TP-Link devem priorizar a aplicação de patches, especialmente em equipamentos expostos à internet, dada a combinação de exploração ativa confirmada e a prevalência de falhas de injeção de comandos.

CVE-2026-0834HIGHLogic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13EPSS 0.4%CVE-2026-34124HIGHDenial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WSEPSS 0.4%CVE-2026-0629HIGHAuthentication Bypass in Password Recovery Feature via Local Web App on Multiple VIGI CamerasEPSS 0.4%CVE-2025-15551MEDIUMLAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845NEPSS 0.4%CVE-2026-75619MEDIUMRTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101EPSS 0.4%CVE-2025-30241HIGHOS Command Injection in Web Interface in Multiple TP-Link Aginet DevicesEPSS 0.4%CVE-2025-14738MEDIUMConfiguration Disclosure Vulnerability in TP-Link WA850REEPSS 0.4%CVE-2025-59482HIGHHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX53EPSS 0.4%CVE-2025-58455HIGHHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX53EPSS 0.4%CVE-2025-59487HIGHHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX53EPSS 0.4%CVE-2025-58077HIGHHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX53EPSS 0.4%CVE-2025-61944HIGHHeap-based Buffer Overflow Vulnerability in TP-Link Archer AX53EPSS 0.4%CVE-2026-0653HIGHInsecure Access Control on TP-Link Tapo D235 and C260EPSS 0.4%CVE-2026-8697HIGHImproper Authentication Rate Limiting on TP-Link's Archer C64EPSS 0.4%CVE-2026-13230MEDIUMInformation Disclosure Vulnerability in Local Discovery Response in TP-Link Kasa EC70 and EC71EPSS 0.4%CVE-2026-15469HIGHHard-coded Mesh Group Private Key in TP-Link Deco XE75, XE5300, and WE10800EPSS 0.4%CVE-2026-75618HIGHRTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101EPSS 0.4%CVE-2026-75118HIGHhttp_gdpr_decrypt Pre-Authentication Stack-Based Buffer OverflowEPSS 0.4%CVE-2025-14300HIGHUnauthenticated Access to connectAP API Endpoint on Tapo C100, C200 & C425EPSS 0.4%CVE-2026-34127MEDIUMStored Cross-Site Scripting (XSS) via Configuration File Import on TP-Link's TL-SG108PEEPSS 0.4%