Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.5Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…Mar 23, 2026
- High8.6A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for a…Mar 23, 2026
- High7.7This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters ca…Mar 20, 2026
- High7.3A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log redirection to arbitrary files and con…Mar 20, 2026
- High8.5A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command.Mar 16, 2026
- High7.7The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.Mar 13, 2026
- High8.5A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3.Mar 12, 2026
- High8.5A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router.Mar 9, 2026
- Medium6.9A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3.Mar 5, 2026
- Medium6.9Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TP-Link Deco BE25 v1.0 (web modules) allows authenticated adjacent atta…Mar 2, 2026
- High8.5Improper input handling in the administration web interface on TP-Link Deco BE25 v1.0 allows crafted input to be executed as part of an OS command.Mar 2, 2026
- High8.5An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2 (web modules) allows adjacent authenticated attacker to execute arbitrary code.EPSS 1.6%Feb 2, 2026
- High8.6TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection VulnerabilityKEVEPSS 37.7%Aug 29, 2025
- Medium6.5TP-Link TL-WR841N Authentication Bypass by Spoofing VulnerabilityKEVEPSS 20.0%May 2, 2024
- High8.8TP-Link Multiple Routers Command Injection VulnerabilityKEVEPSS 41.6%Jun 6, 2023
- High8.8TP-Link Archer AX-21 Command Injection VulnerabilityKEVEPSS 100.0%Mar 15, 2023
- High8.8TP-link TL-WA855RE Missing Authentication for Critical Function VulnerabilityKEVEPSS 22.2%Aug 31, 2020
- High7.5TP-Link Multiple Archer Devices Directory Traversal VulnerabilityKEVEPSS 83.9%Apr 21, 2015
43 records · page 2 of 2
PreviousNext