TP-Link known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 6 TP-Link vulnerabilities: 0 added in the last 365 days, 0 rated critical (CVSS 9 or higher), and 0 with known ransomware use. The most recent was added Sep 3, 2025.
RSS feed for TP-Link exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2025-09-03 | CVE-2023-50224 | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | 6.5 (v3.1) | 20.0% | 2025-09-24 | Unknown |
| 2025-09-03 | CVE-2025-9377 | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | 8.6 (v4.0) | 37.7% | 2025-09-24 | Unknown |
| 2025-09-02 | CVE-2020-24363 | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability | 8.8 (v3.1) | 22.2% | 2025-09-23 | Unknown |
| 2025-06-16 | CVE-2023-33538 | TP-Link Multiple Routers Command Injection Vulnerability | 8.8 (v3.1) | 41.6% | 2025-07-07 | Unknown |
| 2023-05-01 | CVE-2023-1389 | TP-Link Archer AX-21 Command Injection Vulnerability | 8.8 (v3.1) | >99.9% | 2023-05-22 | Unknown |
| 2022-03-25 | CVE-2015-3035 | TP-Link Multiple Archer Devices Directory Traversal Vulnerability | 7.5 (v3.1) | 83.9% | 2022-04-15 | Unknown |