Read the docs

TP-Link

Records637All Threatist records
Exploited (KEV)6In CISA KEV
CVSS critical100CVSS 9.0–10.0
CVSS high356CVSS 7.0–8.9

Exploited now

TP-Link records in CISA KEV
TI-2023-27456 TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability Priority CRITICAL 86KEV 2025-09-03TI-2025-08589 TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability Priority CRITICAL 96KEV 2025-09-03TI-2020-14907 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability Priority CRITICAL 97KEV 2025-09-02TI-2023-16571 TP-Link Multiple Routers Command Injection Vulnerability Priority CRITICAL 97KEV 2025-06-16TI-2023-01313 TP-Link Archer AX-21 Command Injection Vulnerability Priority CRITICAL 97KEV 2023-05-01TI-2015-02672 TP-Link Multiple Archer Devices Directory Traversal Vulnerability Priority CRITICAL 90KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Tl-wr841n Firmware 39 records CRITICAL Tl-wr886n Firmware 39 records MEDIUM Er5110g Firmware 25 records LOW Er5120g Firmware 25 records LOW Er5510g Firmware 25 records LOW Er5520g Firmware 25 records LOW R4149g Firmware 25 records LOW R4239g Firmware 25 records LOW

Records

12 records in Archer Be230 Firmware · all components

TI-2026-17837 CVE-2026-22227 · GHSA-6528-8492-63gh

Command Injection Vulnerability on TP-Link Archer BE230 v1.2

Priority MEDIUM 44

A command injection vulnerability may be exploited after the admin's authentication via the configuration backup restoration function of the TP-Link Archer BE230 v1.2.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.02659 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420 CWE-78
TI-2026-17836 CVE-2026-22226 · GHSA-qf7r-j48x-v42x

Command Injection Vulnerability on TP-Link Archer BE230 and AX73

Priority MEDIUM 44

A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.02465 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420, 1.3.1 Build 20260430 CWE-78
TI-2026-17835 CVE-2026-22225 · GHSA-78xx-4783-fh7x

Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0

Priority MEDIUM 44

A command injection vulnerability may be exploited after the admin's authentication in the VPN Connection Service on the Archer BE230 v1.2 and Archer AXE75 v1.0.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.02738 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420, < 1.5.3 Build 20260209 rel. 71108 CWE-78
TI-2026-17834 CVE-2026-22224 · GHSA-qjhj-536f-7g4p

Command Injection Vulnerability on TP-Link Archer BE230 v1.2

Priority MEDIUM 44

A command injection vulnerability may be exploited after the admin's authentication in the cloud communication interface on the TP-Link Archer BE230 v1.2.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.02651 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420 CWE-78
TI-2026-17839 CVE-2026-22229 · GHSA-7pqr-cq7g-8mqw

Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and Deco BE25 v1.0

Priority MEDIUM 43

A command injection vulnerability may be exploited after the admin's authentication via the import of a crafted VPN client configuration file on the TP-Link Archer BE230 v1.2 and Deco BE25 v1.0.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.02093 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420 CWE-78
TI-2026-17833 CVE-2026-22223 · GHSA-jvhp-3qqj-g4mf

Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1

Priority MEDIUM 42

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and BE3600 v1 (vpn modules) allows adjacent authenticated attacker execute arbitrary code.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.01376 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420, (KR)_V1_1.2.2 Build 20260903 +2 CWE-78
TI-2026-17832 CVE-2026-22222 · GHSA-53cf-72jr-x9hm

Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v2

Priority MEDIUM 42

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2 (web modules) allows adjacent authenticated attacker to execute arbitrary code.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.0155 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420, V2_1.2.0 Build 20260603 CWE-78
TI-2026-17831 CVE-2026-22221 · GHSA-f2x5-qvg5-jjpj

Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1

Priority MEDIUM 42

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1 allows adjacent authenticated attacker execute arbitrary code.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.01409 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420, (KR)_V1_1.2.2 Build 20260903 +2 CWE-78
TI-2026-00429 CVE-2026-0631 · GHSA-j6g9-f586-p93v

Authenticated Command Injection Vulnerability in Surfshark VPN Login in multiple Archer products

Priority MEDIUM 42

An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1, AX10 v3 and AXE75 v1, allowing an adjacent authenticated attacker to execute arbitrary code.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.01623 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420, 1.5.6 Build 20260623 +4 CWE-78
TI-2026-00428 CVE-2026-0630 · GHSA-cc62-3p5g-fr7j

Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0

Priority MEDIUM 42

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(web modules) and Archer AXE75 v1.0 allows adjacent authenticated attacker to execute arbitrary code.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.01338 Published 2026-02-02 Fixed in 1.2.4 Build 20251218 rel.70420, 1.5.3 Build 20260209 rel. 71108 CWE-78
TI-2026-17838 CVE-2026-22228 · GHSA-qh7q-x454-phcx

Improper Input Validation Leading to DoS on TP-Link Archer BE230

Priority LOW 30

An authenticated user with high privileges may trigger a denial‑of‑service condition in TP-Link Archer BE230 v1.2 by restoring a crafted configuration file containing an excessively long parameter.

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00388 Published 2026-02-03 Fixed in 1.2.4 Build 20251218 rel.70420 CWE-400
TI-2026-17830 CVE-2026-22220 · GHSA-gm7f-mr33-3p7w

Improper Input Validation Leading to DoS on TP-Link Archer BE230

Priority LOW 30

A lack of proper input validation in the HTTP processing path in TP-Link Archer BE230 v1.2 (web modules) may allow a crafted request to cause the device’s web service to become unresponsive, resulting in a denial of serv…

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00246 Published 2026-02-03 Fixed in 1.2.4 Build 20251218 rel.70420 CWE-20
Open these records in search →