Vulnerabilities

TI-2026-74509 CVE-2026-102298

Missing authorization in TP-Link Omada Controller MSP mode

LOW 35

In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00437 Published 2026-10-14 Fixed in 6.3.0.45 CWE-639

TI-2026-69751 CVE-2026-102368

Plaintext storage of device private key in Tapo S505 firmware

LOW 25

Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage.

CVSS 4.0MEDIUM 5.4 Physical No auth No interaction EPSS 0.00103 Published 2026-10-08 Fixed in 1.4.1 Build 260713 CWE-312

TI-2026-65319 CVE-2026-102294 · GHSA-f292-ffrv-823x

Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration

MEDIUM 41

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.00946 Published 2026-10-01 Fixed in 4.19 Build 260821 (EN), 4.19 Build 260820 (US) CWE-78

TI-2026-56252 CVE-2026-81531 · GHSA-2pv5-9q5x-x59w

Unauthenticated Account Information Disclosure in Multiple Omada Controllers

LOW 38

An information disclosure vulnerability has been identified in Omada Controller.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00666 Published 2026-09-08 Fixed in 6.3.0.45, (UN)_V1_1.42.10 Build 20260825 +6 CWE-200

TI-2026-53559 CVE-2026-76651 · GHSA-wqxh-m9g7-9pc2

Pre-Authentication Multipart Boundary Buffer Overflow in HTTP Service in TP-Link TL-WR841N

LOW 24

A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data requests.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00444 Published 2026-08-28 Fixed in TL-WR841N(US)_V14_4.19 Build 260820 Rel.33478, TL-WR841N(EU)_V14_4.19 Build 260821 Rel.56588 CWE-120

TI-2026-53558 CVE-2026-76650 · GHSA-wg9w-9v33-74xx

Pre-Authentication NULL Pointer Dereference in UPnP SOAP State Variable Query Processing in TP-Link TL-WR841N

LOW 24

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00268 Published 2026-08-28 Fixed in TL-WR841N(US)_V14_4.19 Build 260820 Rel.33478, TL-WR841N(EU)_V14_4.19 Build 260821 Rel.56588 CWE-476

TI-2026-53557 CVE-2026-76649 · GHSA-2cvh-668x-j624

Pre-Authentication NULL Pointer Dereference in UPnP SOAP Action Request Processing in TP-Link TL-WR841N

LOW 24

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00268 Published 2026-08-28 Fixed in TL-WR841N(US)_V14_4.19 Build 260820 Rel.33478, TL-WR841N(EU)_V14_4.19 Build 260821 Rel.56588 CWE-476

TI-2025-10706 CVE-2025-11676 · GHSA-ppr2-rx8w-xw63

UPnP DOS in TL-WR940N V6

LOW 31

Improper input validation vulnerability in TP-Link System Inc.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00208 Published 2025-11-20 No fix listed CWE-20

TI-2025-06351 CVE-2025-6983 · GHSA-56qp-2wvp-mgx4

Clickjacking vulnerability on the management web application of TP-LINK Archer C1200

LOW 24

A Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI layers or frames.This issue affects Archer C1200 <= 1.1.5.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0046 Published 2025-07-16 No fix listed CWE-1021

Vulnerabilities

Filters