Skip to content
OpenAdvisories

Vendor

TP-Link Systems

326 known vulnerabilities.

Products

AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) 12 Archer AX53 v1.0 11 Archer BE230 v1.2 11 Omada Gateways 11 N300 Wireless Access Point (EAP115) 10 ER7206 Omada Gigabit VPN Router 9 Archer A7 9 Tapo C520WS v2 9 Tapo C520WS v2.6 8 Tapo C200 v5 7 Omada ER605 7 Omada Switches 7 Omada Access Points 7 TL-WR940N 6 TL-WR841N V11 6 RE305 v3 6 TL-WR841N 6 Archer BE3600 v1 6 VX800v v1.0 5 AX53 v1.0 5 Tapo C100 v5 5 Tapo C120 v1 5 HB810(US2) V1.0/1.6/2.0/2.6 5 HB810(EU1) V2.0 5 HB710(US2) V1.6/1.0 5 HB710(EU1) 1.0 5 HB610(US2) V2.6/2.0 5 HB610(EU1) 5 HB610(CA) V2.0 5 HB410( EU1) 1.0 5 HB210(US2) 1.0 5 HB210(EU1) 1.0 5 HB210 Pro(EU1)1.0 5 HB210 Pro(US2)1.0/1.6 5 EX220(BR) V1.0/1.20/1.28/1.29/1.8 5 EX220(BR) V2.0 5 EX220(EU1) V1.0/1.20 5 EX220(RU) V1.0 5 EX220(US1) V1.0 5 EX222(EU1) V1.0 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-19586 Public exploit

    Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways

    A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote …

    TP-Link Systems DR3650v v1 ER7412-M2 v1 ER603WP-4G-Outdoor v1 Network devices
  • Critical 9.2
    CVE-2025-40634 Public exploit

    Stack-based buffer overflow in TP-Link Archer AX50

    Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the devi…

    TP-Link Systems Link Archer AX50 Network devices
  • Critical 9.8
    CVE-2021-4045 Public exploit EPSS 72%

    TP-LINK Tapo C200 remote code execution vulnerability

    TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control…

    TP-Link Systems Tapo C200 Network devices