Vulnerabilidades em TP-Link Systems Inc.

211 resultados
Análise Vexday

Com 121 CVEs catalogadas, os dispositivos TP-Link Systems Inc. apresentam taxa de exploração ativa 1,8× acima da média geral do catálogo CISA KEV, o que indica que vulnerabilidades nesse portfólio têm sido alvo de agentes maliciosos em proporção elevada. O tipo de falha mais recorrente é CWE-78 (injeção de comandos no sistema operacional), categoria que facilita execução remota de código e tende a ser explorada com relativa facilidade. O CVE mais crítico em exploração ativa no momento é CVE-2025-9377, com EPSS de 0,1175, e o surgimento de 33 novas CVEs nos últimos 90 dias sinaliza um ritmo recente de descobertas que merece acompanhamento contínuo. Equipes responsáveis por ativos TP-Link devem priorizar a aplicação de patches, especialmente em equipamentos expostos à internet, dada a combinação de exploração ativa confirmada e a prevalência de falhas de injeção de comandos.

CVE-2025-9292LOWPermissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud ControllersEPSS 0.4%CVE-2026-75618HIGHRTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101EPSS 0.4%CVE-2026-75118HIGHhttp_gdpr_decrypt Pre-Authentication Stack-Based Buffer OverflowEPSS 0.4%CVE-2026-3622HIGHDenial-of-Service Vulnerability in UPnP Component of TP Link's TL-WR841NEPSS 0.4%CVE-2025-14300HIGHUnauthenticated Access to connectAP API Endpoint on Tapo C100, C200 & C425EPSS 0.4%CVE-2025-53711MEDIUMTP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflowEPSS 0.4%CVE-2025-53712MEDIUMTP-Link TL-WR841N WlanNetworkRpm_AP.htm buffer overflowEPSS 0.4%CVE-2025-53713MEDIUMTP-Link TL-WR841N WlanNetworkRpm_APC.htm buffer overflowEPSS 0.4%CVE-2025-53715MEDIUMTP-Link TL-WR841N Wan6to4TunnelCfgRpm.htm buffer overflowEPSS 0.4%CVE-2025-53714MEDIUMTP-Link TL-WR841N WzdWlanSiteSurveyRpm_AP.htm buffer overflowEPSS 0.4%CVE-2026-12760HIGHDenial-of-Service Vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C200EPSS 0.4%CVE-2026-102814HIGHImproper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305EPSS 0.4%CVE-2026-30817MEDIUMArbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53EPSS 0.4%CVE-2026-18167HIGHStack-based buffer overflow in TP-Link Archer AX55 v4EPSS 0.4%CVE-2026-109506MEDIUMImproper Authentication in Multiple TP-Link WiFi RepeatersEPSS 0.3%CVE-2026-19683MEDIUMUnencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada GatewaysEPSS 0.3%CVE-2026-105672HIGHUnauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WBEPSS 0.3%CVE-2025-15544MEDIUMWeak Credential Protection During TP-Link Omada Device AdoptionEPSS 0.3%CVE-2026-12001MEDIUMHardcoded Credential Vulnerability in Multiple TP-Link Router ModelsEPSS 0.3%CVE-2026-15316HIGHDenial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200EPSS 0.3%