Vulnerabilidades em TP-Link Systems Inc.

147 resultados
Análise Vexday

Com 121 CVEs catalogadas, os dispositivos TP-Link Systems Inc. apresentam taxa de exploração ativa 1,8× acima da média geral do catálogo CISA KEV, o que indica que vulnerabilidades nesse portfólio têm sido alvo de agentes maliciosos em proporção elevada. O tipo de falha mais recorrente é CWE-78 (injeção de comandos no sistema operacional), categoria que facilita execução remota de código e tende a ser explorada com relativa facilidade. O CVE mais crítico em exploração ativa no momento é CVE-2025-9377, com EPSS de 0,1175, e o surgimento de 33 novas CVEs nos últimos 90 dias sinaliza um ritmo recente de descobertas que merece acompanhamento contínuo. Equipes responsáveis por ativos TP-Link devem priorizar a aplicação de patches, especialmente em equipamentos expostos à internet, dada a combinação de exploração ativa confirmada e a prevalência de falhas de injeção de comandos.

CVE-2026-0652HIGHRemote Code Execution on TP-Link Tapo C260 by Guest UserEPSS 21.6%CVE-2025-9377HIGHAuthenticated RCE via Parental Control command injectionEPSS 11.8%KEVCVE-2025-9961HIGHAuthenticated RCE by CWMP binaryEPSS 9.9%CVE-2026-1457HIGHAuthenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385EPSS 6.6%CVE-2025-6151HIGHTP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflowEPSS 3.3%CVE-2025-15517HIGHAuthorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX600EPSS 3.1%CVE-2026-11409HIGHOS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940NEPSS 2.8%CVE-2026-11410HIGHOS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940NEPSS 2.8%CVE-2026-22225HIGHCommand Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0EPSS 2.7%CVE-2025-14756HIGHAuthenticated Command Injection Vulnerability in Archer MR600EPSS 2.7%CVE-2026-22227HIGHCommand Injection Vulnerability on TP-Link Archer BE230 v1.2EPSS 2.6%CVE-2026-22224HIGHCommand Injection Vulnerability on TP-Link Archer BE230 v1.2EPSS 2.6%CVE-2026-5509HIGHArbitrary Command Injection via Browser Developer Console in TP-Link Archer BE450 and BE7200EPSS 2.5%CVE-2026-22226HIGHCommand Injection Vulnerability on TP-Link Archer BE230 and AX73EPSS 2.4%CVE-2025-7850CRITICALAuthenticated OS command executionEPSS 2.0%CVE-2025-15607HIGHAuthenticated Command Injection in mcsd Service of TP-Link Archer AX53EPSS 2.0%CVE-2026-22229HIGHCommand Injection Vulnerability on TP-Link Archer BE230 v1.2 and Deco BE25 v1.0EPSS 1.9%CVE-2026-3841HIGHCommand Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400EPSS 1.8%CVE-2025-15568HIGHCommand Injection Vulnerability on TP-Link Archer AXE75EPSS 1.4%CVE-2026-22222HIGHCommand Injection Vulnerability on TP-Link Archer BE230 v1.2EPSS 1.4%