Skip to content
OpenAdvisories

Vendor

TP-Link Systems

326 known vulnerabilities.

Products

AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) 12 Archer AX53 v1.0 11 Archer BE230 v1.2 11 Omada Gateways 11 N300 Wireless Access Point (EAP115) 10 ER7206 Omada Gigabit VPN Router 9 Archer A7 9 Tapo C520WS v2 9 Tapo C520WS v2.6 8 Tapo C200 v5 7 Omada ER605 7 Omada Switches 7 Omada Access Points 7 TL-WR940N 6 TL-WR841N V11 6 RE305 v3 6 TL-WR841N 6 Archer BE3600 v1 6 VX800v v1.0 5 AX53 v1.0 5 Tapo C100 v5 5 Tapo C120 v1 5 HB810(US2) V1.0/1.6/2.0/2.6 5 HB810(EU1) V2.0 5 HB710(US2) V1.6/1.0 5 HB710(EU1) 1.0 5 HB610(US2) V2.6/2.0 5 HB610(EU1) 5 HB610(CA) V2.0 5 HB410( EU1) 1.0 5 HB210(US2) 1.0 5 HB210(EU1) 1.0 5 HB210 Pro(EU1)1.0 5 HB210 Pro(US2)1.0/1.6 5 EX220(BR) V1.0/1.20/1.28/1.29/1.8 5 EX220(BR) V2.0 5 EX220(EU1) V1.0/1.20 5 EX220(RU) V1.0 5 EX220(US1) V1.0 5 EX222(EU1) V1.0 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.0
    CVE-2025-9292

    Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers

    A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the a…

    TP-Link Systems Omada cloud controller Network devices
  • Low 2.1
    CVE-2025-9521

    Password Confirmation Bypass in Omada Controller

    Password Confirmation Bypass vulnerability in Omada Controllers, allowing an attacker with a valid session token to bypass secondary verification, and change the user’s password without proper confirmation, leading to weakened account security.

    TP-Link Systems Omada Controller Network devices
  • Low 3.7
    CVE-2025-0730

    TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings

    A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP GET Request Handler. The manipulation of the argument usernam…

    TP-Link Systems TL-SG108E Network devices