TP Link Systems Inc.

Products

ProductCVEsExploitedLatest
Archer C7(EU) V211Aug 29, 2025
TL-WR841N/ND(MS) V911Aug 29, 2025
Archer BE230 v1.211–Feb 3, 2026
Omada Gateways11–Aug 3, 2026
Archer AX53 v1.011–Feb 3, 2026
Tapo C520WS v29–Jun 5, 2026
Tapo C520WS v2.68–Apr 2, 2026
Omada Switches7–Aug 3, 2026
Tapo C200 V57–Oct 1, 2026
Omada Access Points7–Aug 3, 2026
Archer BE3600 V16–Aug 24, 2026
TL-WR841N V116–Jul 29, 2025
RE305 v36–Oct 27, 2026
HB710(EU1) 1.05–Aug 10, 2026
HB210 Pro(US2)1.0/1.65–Aug 10, 2026
EX220(EU1) V1.0/1.205–Aug 10, 2026
Omada Controllers5–Aug 3, 2026
HB610(US2) V2.6/2.05–Aug 10, 2026
Tapo C120 V15–Oct 1, 2026
AX53 v1.05–Apr 8, 2026
EX222(KR) V1.05–Aug 10, 2026
EX820v(EU1) V1.05–Aug 10, 2026
Tapo C100 v55–Aug 19, 2026
HB210(US2) 1.05–Aug 10, 2026
EX220(BR) V2.05–Aug 10, 2026
EX222(US1) V1.05–Aug 10, 2026
EX222(EU1) V1.05–Aug 10, 2026
EX220(RU) V1.05–Aug 10, 2026
XX530v(BR)v2.05–Aug 10, 2026
HB710(US2) V1.6/1.05–Aug 10, 2026
HB210(EU1) 1.05–Aug 10, 2026
HB410( EU1) 1.05–Aug 10, 2026
EX520v(EU1)1.05–Aug 10, 2026
HB610(EU1)5–Aug 10, 2026
HB810(EU1) V2.05–Aug 10, 2026
VX800v v1.05–Jan 29, 2026
EX920(US2) V1.6/V1.05–Aug 10, 2026
EX220(US1) V1.05–Aug 10, 2026
HB210 Pro(EU1)1.05–Aug 10, 2026
HB610(CA) V2.05–Aug 10, 2026
EX220(BR) V1.0/1.20/1.28/1.29/1.85–Aug 10, 2026
HB810(US2) V1.0/1.6/2.0/2.65–Aug 10, 2026
VX800v(DE) V1.04–Aug 10, 2026
EB810v(EU1) V1.04–Aug 10, 2026
XX530v(US1)4–Aug 10, 2026
XX530v(EU1)4–Aug 10, 2026
VX420-G2h(AU) V3.04–Aug 10, 2026
Archer NX600 v2.04–Mar 23, 2026
Omada Pro gateways4–Oct 21, 2025
XC220-G3v(EU1) V2.304–Aug 10, 2026
Archer NX600 v3.04–Mar 23, 2026
Festa gateways4–Oct 21, 2025
Archer C20 v64–Aug 19, 2026
Archer NX200 v2.204–Mar 23, 2026
XX530v(BR)v1.04–Aug 10, 2026
Archer NX210 v2.0 v2.204–Mar 23, 2026
Archer NX500 v2.04–Mar 23, 2026
Tapo C200 V34–Jun 24, 2026
Archer NX210 v3.04–Mar 23, 2026
XC220-G3v(US1) V2.304–Aug 10, 2026
Archer NX600 v1.04–Mar 23, 2026
Archer C20 V54–Jun 22, 2026
Archer NX200 v1.04–Mar 23, 2026
Archer NX500 v1.04–Mar 23, 2026
TL-WR841N v144–Jun 29, 2026
Archer NX200 v3.04–Mar 23, 2026
Archer NX200 v2.04–Mar 23, 2026
ER707-M2 v13–Aug 20, 2026
Tapo C101 v53–Aug 19, 2026
HX220(EU1) V1.03–Aug 10, 2026
DR3220v-4G v13–Aug 20, 2026
EX511(BR) V2.0/2.8/2.93–Aug 10, 2026
ER703WP-4G-Outdoor v13–Aug 20, 2026
ER8411 v13–Aug 20, 2026
EB210 Pro(EU1) 1.03–Aug 10, 2026
EX520(US1) V1.03–Aug 10, 2026
ER7406 v13–Aug 20, 2026
HX710 Pro(EU1) V1.03–Aug 10, 2026
Deco BE25 v1.03–Mar 2, 2026
ER706W-4G v23–Aug 20, 2026
ER706WP-4G v13–Aug 20, 2026
ER7412-M2 v13–Aug 20, 2026
EX511(EU1) V2.03–Aug 10, 2026
Tapo C220 v13–Jan 27, 2026
HX510(US1) V2.03–Aug 10, 2026
ER605W v23–Aug 20, 2026
EX141(BR) V1.0/1.93–Aug 10, 2026
ER605 v23–Aug 20, 2026
DR3150 v13–Aug 20, 2026
Kasa EC70 V43–Oct 1, 2026
HX510(US2) 2.63–Aug 10, 2026
Tapo C210 v3.63–Oct 19, 2026
EB210 Pro(US1) 1.03–Aug 10, 2026
ER603WP-4G-Outdoor v13–Aug 20, 2026
TL-WR940N v63–Jul 29, 2026
EX141(EU1) V1.03–Aug 10, 2026
ER7212PC v23–Aug 20, 2026
HX710(EU1) V1.03–Aug 10, 2026
HX510(AU) V1.0/2.03–Aug 10, 2026
Omada OLTs3–Aug 3, 2026
Tapo C325WB v23–Oct 8, 2026
HC220-G5(EU1) V1.20/1.03–Aug 10, 2026
TL-MR6400 v7.03–Aug 21, 2026
ER706W v13–Aug 20, 2026
TL-WR850N v33–Jul 27, 2026
HX510(EU1) V2.03–Aug 10, 2026
HX220(CA) V1.03–Aug 10, 2026
VX1800v(EU1) V1.03–Aug 10, 2026
ER7206 v23–Aug 20, 2026
Omada Controller3–Jan 26, 2026
EX521(US1) V1.03–Aug 10, 2026
HC220-G5(US1) V1.0/1.63–Aug 10, 2026
XX230v(BR) V1.03–Aug 10, 2026
ER701-5G-Outdoor v13–Aug 20, 2026
HX141(EU1) V1.03–Aug 10, 2026
EX511(US1) V2.03–Aug 10, 2026
HX220(US1) V1.0/1.63–Aug 10, 2026
Kasa EC71 V43–Oct 1, 2026
Omada Cloud Controller3–Feb 13, 2026
Archer MR600 v23–Aug 19, 2026
EX141(US1) V1.03–Aug 10, 2026
DR3650v-4G v13–Aug 20, 2026
Archer VX1800v v13–Jul 14, 2026
HC220-G5(BR) V1.303–Aug 10, 2026
HX220(AU) V1.03–Aug 10, 2026
Tapo C260 v13–Feb 10, 2026
DR3650v v13–Aug 20, 2026
HX510(CA) V1.0/2.03–Aug 10, 2026
Omada Software Controller3–Oct 14, 2026
v12–Aug 20, 2026
VIGI NVR1104H-4P V12–Jul 22, 2025
OC400 v12–Sep 10, 2026
TP-Link Tapo App2–Dec 16, 2025
VIGI NVR2016H-16MP V22–Jul 22, 2025
Archer A6 v42–Aug 7, 2026
Tapo D235 v12–Feb 10, 2026
Tapo C210 v32–Apr 2, 2026
Tapo C500 v2.02–Oct 6, 2026
OC220 v22–Sep 10, 2026
OC220 v12–Sep 10, 2026
Archer C7 v52–Oct 27, 2026
HS300 V22–Oct 14, 2026
Tapo Cloud Service2–Nov 3, 2026
TL-MR100 v3.202–Aug 28, 2026
Archer AX12 V12–Jun 10, 2026
KP200 V32–Oct 14, 2026
OC200 v32–Sep 10, 2026
KP303 V22–Oct 14, 2026
TL-MR6400 v82–Sep 10, 2026
TL-MR6400 v5.32–Aug 10, 2026
Archer MR6002–Sep 10, 2026
AX53 v12–Mar 20, 2026
TL-WR845N v42–Jul 27, 2026
WA850RE2–Dec 18, 2025
Omada App2–Aug 3, 2026
TL-MR6400 v8.02–Aug 19, 2026
Archer BE800 V12–Aug 24, 2026
Deco M9 Plus V22–Oct 1, 2026
OC300 v12–Sep 10, 2026
TL-WR820N v21–Aug 12, 2026
SG2008 4.2x1–Mar 13, 2026
VIGI C2501–Jan 16, 2026
KS200 v11–Oct 14, 2026
tpCamera App1–Feb 13, 2026
Omada Gateway (ER706W-4G 2.0)1–Jan 22, 2026
ES20M v11–Oct 14, 2026
SG2218P 2.2x1–Mar 13, 2026
EC225-G5(EU1) V1.01–Aug 10, 2026
TL-SG3452P 3.01–Mar 13, 2026
TL-WL841N v131–Apr 23, 2026
SG2218 1.3x1–Mar 13, 2026
RE305 v41–Oct 14, 2026
VIGI InSight Sx45 Series (S245/S345/S445)1–Jan 16, 2026
Tapo C425 v1.21–Dec 20, 2025
Omada Gateway (ER8411)1–Jan 22, 2026
VIGI C230I Mini1–Jan 16, 2026
Archer MR600 v5.01–Jan 26, 2026
Archer AX10 v31–Feb 2, 2026
TL-WR949N v31–Jul 29, 2025
Deco M5 Deco M5 V11–Jul 14, 2026
VIGI Cx85 Series (C385/C485)1–Jan 16, 2026
VIGI InSight Sx85PI Series (S385PI/S485PI)1–Jan 16, 2026
Archer RE605X1–Jan 29, 2026
TL-WR820N v2.81–Dec 29, 2025
Archer AX18 v11–Jun 10, 2026
TL-MR100 v3.21–Aug 19, 2026
Deco App1–Feb 13, 2026
Omada Access Point (EAP723 v1.0, EAP772 v2.0, EAP772-Outdoor v 1.0, EAP770 v2.0)1–Jan 22, 2026
OC2000 v21–Sep 10, 2026
SL2428P 6.2x1–Mar 13, 2026
HS103 v51–Oct 14, 2026
Omada Access Point (EAP603-Outdoor v1.0, EAP615-Wall v1.0/v1.20)1–Jan 22, 2026
OC2000 v11–Sep 10, 2026
Archer BE3600 v1.21–Feb 3, 2026
TD-W8961N v4.01–Mar 23, 2026
Omada Gateway (ER605 v2.0)1–Jan 22, 2026
WR940N and WR941ND1–Dec 18, 2025
RE190 v51–Oct 14, 2026
Archer RE650 v11–May 22, 2026
RE210 AC7501–Sep 8, 2026

Exploited and recent CVEs

  • CVE-2025-9377 High 8.6 Exploited Authenticated RCE via Parental Control command injection 41.3%
  • CVE-2025-9377 High 8.6 Exploited Authenticated RCE via Parental Control command injection 41.3%
  • CVE-2026-118865 High 7.3 Authenticated OS Command Injection in Archer AX3000 v2 Offline Download Component 0.9%
  • CVE-2026-105822 High 8.3 Server-Side Request Forgery in Tapo Cloud MQTT Proxy 0.2%
  • CVE-2026-105821 High 8.3 Broken Access Control Leading to Cross-Device Token Issuance in Tapo Cloud MQTT Proxy 0.2%
  • CVE-2026-102816 Medium 5.3 Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305 0.2%
  • CVE-2026-102815 Medium 6.9 Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305 0.6%
  • CVE-2026-102814 High 8.7 Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305 0.4%
  • CVE-2026-102813 Medium 6.1 Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305 0.2%
  • CVE-2026-102812 Medium 6.9 Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7 0.1%
  • CVE-2026-102812 Medium 6.9 Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7 0.1%
  • CVE-2026-100420 Medium 6.8 Information disclosure vulnerability in the cloud-client daemon of Deco BE63 0.2%
  • CVE-2026-89052 Medium 5.9 Hardcoded AES encryption key in Archer C6 0.2%
  • CVE-2026-105815 High 7.1 Credential Material Exposure Leading to Unauthorized Streamed Media-Session Access in TP-Link Tapo C210 0.2%
  • CVE-2026-105814 Medium 5.3 Order-Dependent Authentication Bypass in the DS JSON API in TP-Link Tapo C210 0.3%
  • CVE-2026-105810 High 8.5 Authenticated Local Stack Overflow in TP-Link Tapo C320WS 0.5%
  • CVE-2026-107795 High 7.5 Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management API 0.2%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%
  • CVE-2026-109506 Medium 5.9 Improper Authentication in Multiple TP-Link WiFi Repeaters 0.3%