Vendors / TP-Link System Inc. Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now TP-Link System Inc. records in CISA KEV No TP-Link System Inc. vulnerabilities are listed in CISA KEV.
Priority MEDIUM 41
TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration.
CVSS 4.0 HIGH 8.5· Adjacent network · High privileges · No interaction · EPSS 0.00946 · Published 2026-10-01 · Fixed in 4.19 Build 260821 (EN), 4.19 Build 260820 (US) CWE-78
Priority LOW 38
An information disclosure vulnerability has been identified in Omada Controller.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00666 · Published 2026-09-08 · Fixed in 6.3.0.45, (UN)_V1_1.42.10 Build 20260825 +6 CWE-200
Priority LOW 35
In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.
CVSS 4.0 HIGH 7.5· Network · High privileges · No interaction · EPSS 0.00437 · Published 2026-10-14 · Fixed in 6.3.0.45 CWE-639
Priority LOW 31
Improper input validation vulnerability in TP-Link System Inc.
CVSS 4.0 HIGH 7.1· Adjacent network · No auth · No interaction · EPSS 0.00208 · Published 2025-11-20 · No fix listed CWE-20
Priority LOW 25
Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage.
CVSS 4.0 MEDIUM 5.4· Physical · No auth · No interaction · EPSS 0.00103 · Published 2026-10-08 · Fixed in 1.4.1 Build 260713 CWE-312
Priority LOW 24
A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data requests.
CVSS 4.0 MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00444 · Published 2026-08-28 · Fixed in TL-WR841N(US)_V14_4.19 Build 260820 Rel.33478, TL-WR841N(EU)_V14_4.19 Build 260821 Rel.56588 CWE-120
Priority LOW 24
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests.
CVSS 4.0 MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00268 · Published 2026-08-28 · Fixed in TL-WR841N(US)_V14_4.19 Build 260820 Rel.33478, TL-WR841N(EU)_V14_4.19 Build 260821 Rel.56588 CWE-476
Priority LOW 24
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests.
CVSS 4.0 MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00268 · Published 2026-08-28 · Fixed in TL-WR841N(US)_V14_4.19 Build 260820 Rel.33478, TL-WR841N(EU)_V14_4.19 Build 260821 Rel.56588 CWE-476
Priority LOW 24
A Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI layers or frames.This issue affects Archer C1200 <= 1.1.5.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.0046 · Published 2025-07-16 · No fix listed CWE-1021
Open these records in search → All records by CVSS severity
0 3 6 0 0
THREATIST.IORead the docs