T
Vendor security profile6 actively exploited CVEs
tp-link
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs81
Critical8
CISA KEV6
Public exploit20
Patch rate%35
Avg. CVSS7.4
12-month vulnerability rate
0
3
1
5
2
11
4
3
7
18
0
0
CVE KEV
CVE severity distribution
81toplam CVE
Critical8 (10%)
High37 (46%)
Medium30 (37%)
Low1 (1%)
Uncertain5 (6%)
Patch and exploitation view
%35
Verified patch
%7
CISA KEV
%25
Public exploit
28Patch available
0Partial
6Workaround
0Vendor: no patch
47Unknown
Latest vulnerabilities
8.7
CVE-2026-105674
Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
8.7
CVE-2026-105672
Unauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
7.1
CVE-2026-105673
Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
5.4
CVE-2026-102368
Plaintext Storage of a Device-Specific Private Key in Tapo S505 Firmware
TS
Patch verifiedEPSS %0
6.8
CVE-2026-104945
Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500
TS
Patch verifiedEPSS %0
7.1
CVE-2026-104944
Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500
TS
Patch verifiedEPSS %0
5.4
CVE-2026-102370
Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71
TS
Patch verifiedEPSS %0
7.7
CVE-2026-84682
TDDPv2 setProductVer Command Injection in Archer AX90
TS
Patch verifiedEPSS %1
7.7
CVE-2026-8618
Pre-Authentication Stack-based Buffer Overflow Remote Code Execution in TDDPv2 Subtype 0x91 on Deco M9 Plus
TS
Patch verifiedEPSS %0
8.7
CVE-2026-102369
Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200
TS
Patch verifiedEPSS %0