Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

TP-Link: actively exploited vulnerabilities

6 vulnerabilities in TP-Link products (Archer (Wi-Fi routers), TL-WR (Wi-Fi routers), Range extenders and access points (TL-WA, RE)) are in CISA’s catalog of exploited vulnerabilities. Last added: September 3, 2025.

TP-Link security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

Add just one TP-Link category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

  • Archer (Wi-Fi routers) 3 vulnerabilities · Home routers and IoT
  • TL-WR (Wi-Fi routers) 2 vulnerabilities · Home routers and IoT
  • Range extenders and access points (TL-WA, RE) 1 vulnerability · Home routers and IoT

Name used by CISA: TP-Link. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this TP-Link list.

  1. Rank 1TP-Link Range extenders and access points (TL-WA, RE)

    CVE-2020-24363

    CVE from 2020, added in 2025

    TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 2, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  2. Rank 2TP-Link TL-WR (Wi-Fi routers)

    CVE-2023-33538

    CVE from 2023, added in 2025

    TP-Link Multiple Routers Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 16, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  3. Rank 3TP-Link Archer (Wi-Fi routers)

    CVE-2023-1389

    TP-Link Archer AX-21 Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 1, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  4. Rank 4TP-Link Archer (Wi-Fi routers)

    CVE-2015-3035

    CVE from 2015, added in 2022

    TP-Link Multiple Archer Devices Directory Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  5. Rank 5TP-Link Archer (Wi-Fi routers)

    CVE-2025-9377

    TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 3, 2025
    CISA deadline
    21 days
    CVSS severity
    7.2 (high)

  6. Rank 6TP-Link TL-WR (Wi-Fi routers)

    CVE-2023-50224

    CVE from 2023, added in 2025

    TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 3, 2025
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

Follow and verify

Get new TP-Link vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.