TS
Vendor security profile
TP-Link Systems Inc.
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs67
Critical1
CISA KEV0
Public exploit3
Patch rate%91
Avg. CVSS7.4
12-month vulnerability rate
0
1
1
6
1
1
0
0
2
35
6
14
CVE KEV
CVE severity distribution
67toplam CVE
Critical1 (1%)
High42 (63%)
Medium24 (36%)
Patch and exploitation view
%91
Verified patch
%0
CISA KEV
%4
Public exploit
61Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
5.9
CVE-2026-109506
Improper Authentication in Multiple TP-Link WiFi Repeaters
TS
Patch verified
8.7
CVE-2026-108473
Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices
TS
Patch verifiedEPSS %0
8.7
CVE-2026-105674
Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
8.7
CVE-2026-105672
Unauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
7.1
CVE-2026-105673
Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
6.8
CVE-2026-104945
Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500
TS
Patch verifiedEPSS %0
7.1
CVE-2026-104944
Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500
TS
Patch verifiedEPSS %0
5.4
CVE-2026-102370
Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71
TS
Patch verifiedEPSS %0
7.7
CVE-2026-84682
TDDPv2 setProductVer Command Injection in Archer AX90
TS
Patch verifiedEPSS %1
7.7
CVE-2026-8618
Pre-Authentication Stack-based Buffer Overflow Remote Code Execution in TDDPv2 Subtype 0x91 on Deco M9 Plus
TS
Patch verifiedEPSS %0