netVigilance Vulnerability intelligence since 2004

TP-Link

6 TP-Link vulnerabilities with confirmed exploitation in the wild, as published by CISA; 6 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for TP-Link
Vulnerability Status
overdue 351d2025-09-24 CVE-2025-9377 TP-Link / Multiple Routers TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability 2025-09-03 8.6 past due
overdue 351d2025-09-24 CVE-2023-50224 TP-Link / TL-WR841N TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability 2025-09-03 6.5 past due
overdue 352d2025-09-23 CVE-2020-24363 TP-Link / TL-WA855RE TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability 2025-09-02 8.8 past due
overdue 430d2025-07-07 CVE-2023-33538 TP-Link / Multiple Routers TP-Link Multiple Routers Command Injection Vulnerability 2025-06-16 8.8 past due
overdue 1207d2023-05-22 CVE-2023-1389 TP-Link / Archer AX21 TP-Link Archer AX-21 Command Injection Vulnerability 2023-05-01 8.8 past due
overdue 1609d2022-04-15 CVE-2015-3035 TP-Link / Multiple Archer Devices TP-Link Multiple Archer Devices Directory Traversal Vulnerability 2022-03-25 7.5 past due