Vulnerability database

6 results

• Sep 3, 2025TP-Link TL-WR841N Authentication Bypass by Spoofing VulnerabilityCVE-2023-50224 · Network & remote access · TP-Link · reported by zdi-disclosures@trendmicro.comExploitedMedium 6.5

  TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

  Product

  TL-WR841N

  On CISA’s list since

  Sep 3, 2025 (federal fix deadline Sep 24, 2025)

  What to do

  Attackers are using this now. Install TP-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

  Full record and what to do →NVD recordCISA catalogtp-link.comtp-link.com

• Sep 3, 2025TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection VulnerabilityCVE-2025-9377 · Network & remote access · TP-Link · reported by f23511db-6c3e-4e32-a477-6aa17d310630ExploitedHigh 8.6

  TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

  Product

  Multiple Routers

  On CISA’s list since

  Sep 3, 2025 (federal fix deadline Sep 24, 2025)

  What to do

  Attackers are using this now. Install TP-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

  Full record and what to do →NVD recordCISA catalogtp-link.comtp-link.com

• Sep 2, 2025TP-link TL-WA855RE Missing Authentication for Critical Function VulnerabilityCVE-2020-24363 · Network & remote access · TP-Link · reported by MITREExploitedHigh 8.8

  TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

  Product

  TL-WA855RE

  On CISA’s list since

  Sep 2, 2025 (federal fix deadline Sep 23, 2025)

  What to do

  Attackers are using this now. Install TP-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

  Full record and what to do →NVD recordCISA catalogmalwrforensics.compastebin.com

• Jun 16, 2025TP-Link Multiple Routers Command Injection VulnerabilityCVE-2023-33538 · Network & remote access · TP-Link · reported by MITREExploitedHigh 8.8

  TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

  Product

  Multiple Routers

  On CISA’s list since

  Jun 16, 2025 (federal fix deadline Jul 7, 2025)

  What to do

  Attackers are using this now. Install TP-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

  Full record and what to do →NVD recordCISA cataloggithub.comweb.archive.org

• May 1, 2023TP-Link Archer AX-21 Command Injection VulnerabilityCVE-2023-1389 · Network & remote access · TP-Link · reported by vulnreport@tenable.comExploitedHigh 8.8

  TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution.

  Product

  Archer AX21

  On CISA’s list since

  May 1, 2023 (federal fix deadline May 22, 2023)

  What to do

  Attackers are using this now. Install TP-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

  Full record and what to do →NVD recordCISA catalogpacketstormsecurity.comtenable.com

• Mar 25, 2022TP-Link Multiple Archer Devices Directory Traversal VulnerabilityCVE-2015-3035 · Network & remote access · TP-Link · reported by MITREExploitedHigh 7.5

  Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

  Product

  Multiple Archer Devices

  On CISA’s list since

  Mar 25, 2022 (federal fix deadline Apr 15, 2022)

  What to do

  Attackers are using this now. Install TP-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

  Full record and what to do →NVD recordCISA catalogpacketstormsecurity.comseclists.org

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.