Skip to content
OpenAdvisories

Vendor

TP-Link System

10 known vulnerabilities.

Products

TL-WR841N v14 4 Archer C1200 1 Omada Software Controller (Windows) 1 Archer BE230 v1.2 1 Omada Software Controller 1 Tapo S505 v1.6 1 TL-WR940N V6 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2026-102298

    Insufficient Authorization and User Boundary Validation in Omada Controller MSP

    In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controlled Identifier parameter to validate credentials for another account and receive responses that disti…

    TP-Link System Omada Software Controller (Windows) Windows Network devices
  • High 8.5
    CVE-2026-102294

    Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration

    TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating…

    TP-Link System TL-WR841N v14 Network devices
  • High 8.5
    CVE-2026-22223

    Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1

    An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and BE3600 v1 (vpn modules) allows adjacent authenticated attacker execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, re…

    TP-Link Systems TP-Link System Archer BE3600 v1 Archer BE230 v1.2 Network devices
  • High 7.1
    CVE-2025-11676

    UPnP DOS in TL-WR940N V6

    Improper input validation vulnerability in TP-Link System Inc. TL-WR940N V6 (UPnP modules), which allows unauthenticated adjacent attackers to perform DoS attack. This issue affects TL-WR940N V6 <= Build 220801.

    TP-Link System TL-WR940N V6 Network devices