T
Vendor security profile6 actively exploited CVEs
tp-link
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs81
Critical8
CISA KEV6
Public exploit21
Patch rate%35
Avg. CVSS7.4
12-month vulnerability rate
0
3
1
5
2
11
4
3
7
18
0
0
CVE KEV
CVE severity distribution
81toplam CVE
Critical8 (10%)
High37 (46%)
Medium30 (37%)
Low1 (1%)
Uncertain5 (6%)
Patch and exploitation view
%35
Verified patch
%7
CISA KEV
%26
Public exploit
28Patch available
0Partial
6Workaround
0Vendor: no patch
47Unknown
Latest vulnerabilities
8.7
CVE-2026-108473
Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices
TS
Patch verified
8.7
CVE-2026-105674
Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
8.7
CVE-2026-105672
Unauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
7.1
CVE-2026-105673
Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
5.4
CVE-2026-102368
Plaintext Storage of a Device-Specific Private Key in Tapo S505 Firmware
TS
Patch verifiedEPSS %0
6.8
CVE-2026-104945
Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500
TS
Patch verifiedEPSS %0
7.1
CVE-2026-104944
Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500
TS
Patch verifiedEPSS %0
5.4
CVE-2026-102370
Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71
TS
Patch verifiedEPSS %0
7.7
CVE-2026-84682
TDDPv2 setProductVer Command Injection in Archer AX90
TS
Patch verifiedEPSS %1
7.7
CVE-2026-8618
Pre-Authentication Stack-based Buffer Overflow Remote Code Execution in TDDPv2 Subtype 0x91 on Deco M9 Plus
TS
Patch verifiedEPSS %0