Vendor
TP-Link
As of , 6 TP-Link vulnerabilities are on CISA's list of exploited vulnerabilities; 0 were added in 2026. Patch first: CVE-2015-3035.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2015-3035Directory Traversal | TP-Link Multiple Archer Devices | Patch this weekMetasploit module; EPSS 0.84 | 0.84 | ||
| 2 | CVE-2023-1389Archer AX-21 Command Injection | TP-Link Archer AX21 | Patch this weekEPSS 0.99 | 0.99 | ||
| 3 | CVE-2025-9377Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection | TP-Link Multiple Routers | Patch soon | 0.34 | ||
| 4 | CVE-2023-33538Command Injection | TP-Link Multiple Routers | Patch soon | 0.42 | ||
| 5 | CVE-2020-24363Missing Authentication for Critical Function | TP-Link TL-WA855RE | Patch soon | 0.21 | ||
| 6 | CVE-2023-50224Authentication Bypass by Spoofing | TP-Link TL-WR841N | Patch soon | 0.16 |
Products
- Multiple Routers2 entries
- Archer AX211 entry
- Multiple Archer Devices1 entry
- TL-WA855RE1 entry
- TL-WR841N1 entry
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2022 | 1 |
| 2023 | 1 |
| 2024 | none |
| 2025 | 4 |
| 2026 | none |