Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.1The vulnerability affecting TL-WR850N v3 allows cleartext storage of administrative and Wi-Fi credentials in a region of the device’s flash memory while the serial int…Mar 26, 2026
- High7.1The vulnerability exists in the UPnP component of TL-WR841N v14, where improper input validation leads to an out-of-bounds read, potentially causing a crash of the UPnP service.Mar 26, 2026
- High7.1A Denial-of-Service (DoS) vulnerability in the httpd component of TP-Link's TD-W8961N v4.0 due to improper input sanitization, allows crafted requests to trigger a pro…EPSS 0.3%Mar 23, 2026
- High8.5A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data.EPSS 0.1%Mar 23, 2026
- High8.5Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…EPSS 0.6%Mar 23, 2026
- High8.5Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…EPSS 0.6%Mar 23, 2026
- High8.6A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for a…EPSS 3.0%Mar 23, 2026
- UnknownTP-Link tl-wr849n_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 42.7%Mar 23, 2026
- High7.7This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters ca…EPSS 0.6%Mar 20, 2026
- High7.3A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log redirection to arbitrary files and con…EPSS 2.0%Mar 20, 2026
- High8.5A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command.EPSS 1.9%Mar 16, 2026
- High7.7The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.EPSS 1.0%Mar 13, 2026
- High8.5A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3.Mar 12, 2026
- High8.5A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router.EPSS 1.5%Mar 9, 2026
- Medium6.9A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3.EPSS 0.2%Mar 5, 2026
- Medium6.9Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TP-Link Deco BE25 v1.0 (web modules) allows authenticated adjacent atta…EPSS 0.3%Mar 2, 2026
- High8.5Improper input handling in the administration web interface on TP-Link Deco BE25 v1.0 allows crafted input to be executed as part of an OS command.EPSS 0.3%Mar 2, 2026
- High8.5An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2 (web modules) allows adjacent authenticated attacker to execute arbitrary code.EPSS 1.6%Feb 2, 2026
- UnknownTP-Link tl-wr845n_firmware Use of Hard-coded CredentialsKEVJan 20, 2026
- UnknownTP-Link archer_axe75_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVNov 26, 2025
- UnknownTP-Link tl-wr840n_firmware Session FixationKEVOct 9, 2025
- High8.6TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection VulnerabilityKEVEPSS 37.7%Aug 29, 2025
- UnknownImproper AuthenticationKEVMay 9, 2025
- UnknownTP-Link Router AX50 Authenticated Remote Code Execution VulnerabilityKEVNov 26, 2024
- UnknownTP-Link tl-wr840n_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVJul 25, 2024