TP-Link Systems Inc. has 35 CVEs on record. Disclosure cadence is accelerating: 34 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 25. The median CVSS is 7.1 (high). None have a confirmed exploitation report. The dominant weakness classes are CWE-121 (5) and CWE-287 (5). Most affected products: RE305 v3 (6), Tapo C200 V5 (4), HB810(US2) V1.0/1.6/2.0/2.6 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.1
- Publish → KEV
- —
- Last 90 days
- 34 prev 0
Products
- RE305 v3 6
- Tapo C200 V5 4
- HB810(US2) V1.0/1.6/2.0/2.6 3
- Tapo C325WB v2 3
- TL-MR6400 v8 2
- Tapo C210 v3.6 2
Worst active — by depth score
CVE-2026-105810High· 8.5Authenticated Local Stack Overflow in TP-Link Tapo C320WS59CVE-2026-104944High· 7.1TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP (TP-Link Device Protocol) daemon51CVE-2026-104945Medium· 6.8TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers49CVE-2026-102814High· 8.7Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE30548CVE-2026-108473High· 8.7Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol48
TP-Link Systems Inc. vulnerabilities
CVEs affecting TP-Link Systems Inc., newest first. Open any entry for full detail, references, and exploit status.
35 CVEsRSS
CVE-2026-18330Medium· 6.1A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4
A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weaken…
CVE-2025-30239High· 8.5In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. …
In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data. …
CVE-2025-30238High· 8.6In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may perform administrative actions such as creating privileged …
In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may perform administrative actions such as creating privileged …
CVE-2025-30237High· 8.7The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints
The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints. An attacker can send specially crafted requests to bypass authentication a…
CVE-2025-62501High· 7.0SSH Hostkey Misconfiguration Vulnerability in Archer Devices
SSH Hostkey misconfiguration vulnerability in Archer AX53 and Archer BE3600 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized acc…