Exploited vulnerabilities
TP-Link
6 TP-Link vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue6
Last 12 months0
In ransomware campaigns0
Last addition3 September 2025
The vulnerabilities6
- 3 September 2025CVE-2025-9377Multiple RoutersTP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
- 3 September 2025CVE-2023-50224TL-WR841NTP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
- 2 September 2025CVE-2020-24363TL-WA855RETP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
- 16 June 2025CVE-2023-33538Multiple RoutersTP-Link Multiple Routers Command Injection Vulnerability
- 1 May 2023CVE-2023-1389Archer AX21TP-Link Archer AX-21 Command Injection Vulnerability
- 25 March 2022CVE-2015-3035Multiple Archer DevicesTP-Link Multiple Archer Devices Directory Traversal Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, TP-Link included.