Vulnerabilidades em TP-Link Systems Inc.

211 resultados
Análise Vexday

Com 121 CVEs catalogadas, os dispositivos TP-Link Systems Inc. apresentam taxa de exploração ativa 1,8× acima da média geral do catálogo CISA KEV, o que indica que vulnerabilidades nesse portfólio têm sido alvo de agentes maliciosos em proporção elevada. O tipo de falha mais recorrente é CWE-78 (injeção de comandos no sistema operacional), categoria que facilita execução remota de código e tende a ser explorada com relativa facilidade. O CVE mais crítico em exploração ativa no momento é CVE-2025-9377, com EPSS de 0,1175, e o surgimento de 33 novas CVEs nos últimos 90 dias sinaliza um ritmo recente de descobertas que merece acompanhamento contínuo. Equipes responsáveis por ativos TP-Link devem priorizar a aplicação de patches, especialmente em equipamentos expostos à internet, dada a combinação de exploração ativa confirmada e a prevalência de falhas de injeção de comandos.

CVE-2026-104944HIGHUnauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500EPSS 0.3%CVE-2026-17250HIGHAuthenticated Remote Code Execution via Stack-Based Buffer Overflow in Firmware Update HandlingEPSS 0.3%CVE-2025-15542MEDIUMDenial of Service (DoS) of VoIP Communication on TP-Link VX800vEPSS 0.3%CVE-2025-9522MEDIUMBlind Server-Side Request Forgery (SSRF) in Omada ControllerEPSS 0.3%CVE-2025-6982MEDIUMHardcoded DES Decryption Keys in TP-Link Archer C50 V3/V4/V5 and C20 V5EPSS 0.3%CVE-2026-0620MEDIUML2TP over IPSec Encryption Failure on ArcherAXE75EPSS 0.3%CVE-2026-8699HIGHStored Cross-Site Scripting (XSS) in TP-Link Archer C5 Web Management InterfaceEPSS 0.3%CVE-2026-9033MEDIUMUnauthenticated Captive Portal Session Termination and Forced Logout in Omada GatewaysEPSS 0.3%CVE-2026-108473HIGHImproper Authentication and Credential Exposure in Multiple TP-Link Kasa DevicesEPSS 0.3%CVE-2026-78578HIGHUnauthenticated do Method Onboarding Connect Allows Wi‑Fi Reconfiguration Denial of Service Vulnerability in TP-Link Tapo C120 & C200EPSS 0.3%CVE-2026-34122HIGHStack-based Buffer Overflow Leading to Denial of Service in TP-Link Tapo C520WSEPSS 0.3%CVE-2026-17252HIGHUnauthenticated Denial of Service via Composed HTTP Parsing and Stack-Based Out-of-Bounds Write Vulnerability in TL-MR6400 Web Management InterfaceEPSS 0.3%CVE-2026-102369HIGHUnauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200EPSS 0.3%CVE-2025-15541MEDIUMAccess to System Files via SFTP on TP-Link VX800vEPSS 0.3%CVE-2026-105674HIGHPredictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WBEPSS 0.3%CVE-2026-105673HIGHUnauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WBEPSS 0.3%CVE-2026-8618HIGHPre-Authentication Stack-based Buffer Overflow Remote Code Execution in TDDPv2 Subtype 0x91 on Deco M9 PlusEPSS 0.3%CVE-2026-105814MEDIUMOrder-Dependent Authentication Bypass in the DS JSON API in TP-Link Tapo C210EPSS 0.3%CVE-2026-9031MEDIUMAuthenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6EPSS 0.3%CVE-2026-22220MEDIUMImproper Input Validation Leading to DoS on TP-Link Archer BE230EPSS 0.2%