CVEs published by TPLink

CVEs published by TPLink (CVE Numbering Authority). 8 tracked.

CVE-2026-9044 HIGH 8.0 UPGRADE An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers
CVE-2026-15314 HIGH 7.5 UPGRADE Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authen
CVE-2026-12339 MEDIUM 6.9 A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted arch
CVE-2026-9031 MEDIUM 6.8 An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-s
CVE-2026-9030 MEDIUM 6.8 A denial-of-service vulnerability exists in httpd service on Archer A6 v4 where the asynchronous systool instr
CVE-2026-15141 MEDIUM 5.7 UPGRADE The web interface of the affected device relies on the HTTP referrer header as part of request validation. Re
CVE-2026-84682 HIGH 7.7 A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1
CVE-2026-15316 MEDIUM 6.5 UPGRADE An improper input validation vulnerability in the configuration service for processing encrypted credential da