TS
Vendor security profile
TP-Link System Inc.
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS6.5
12-month vulnerability rate
0
0
0
1
0
0
0
0
0
3
1
2
CVE KEV
CVE severity distribution
7toplam CVE
High2 (29%)
Medium5 (71%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
7Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
5.4
CVE-2026-102368
Plaintext Storage of a Device-Specific Private Key in Tapo S505 Firmware
TS
Patch verifiedEPSS %0
8.5
CVE-2026-102294
Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration
TS
Patch verifiedEPSS %1
6.9
CVE-2026-81531
Unauthenticated Account Information Disclosure in Multiple Omada Controllers
TS
Patch verifiedEPSS %1
5.3
CVE-2026-76651
Pre-Authentication Multipart Boundary Buffer Overflow in HTTP Service in TP-Link TL-WR841N
TS
Patch verifiedEPSS %0
5.3
CVE-2026-76650
Pre-Authentication NULL Pointer Dereference in UPnP SOAP State Variable Query Processing in TP-Link TL-WR841N
TS
Patch verifiedEPSS %0
5.3
CVE-2026-76649
Pre-Authentication NULL Pointer Dereference in UPnP SOAP Action Request Processing in TP-Link TL-WR841N
TS
Patch verifiedEPSS %0
8.5
CVE-2026-22223
Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1
TS
Patch verifiedEPSS %1