TS
Vendor security profile
TP-Link Systems Inc.
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs65
Critical1
CISA KEV0
Public exploit1
Patch rate%91
Avg. CVSS7.4
12-month vulnerability rate
0
1
1
6
1
1
0
0
2
35
6
12
CVE KEV
CVE severity distribution
65toplam CVE
Critical1 (2%)
High41 (63%)
Medium23 (35%)
Patch and exploitation view
%91
Verified patch
%0
CISA KEV
%2
Public exploit
59Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
8.7
CVE-2026-105674
Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
8.7
CVE-2026-105672
Unauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
7.1
CVE-2026-105673
Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WB
TS
Patch verifiedEPSS %0
6.8
CVE-2026-104945
Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500
TS
Patch verifiedEPSS %0
7.1
CVE-2026-104944
Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500
TS
Patch verifiedEPSS %0
5.4
CVE-2026-102370
Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71
TS
Patch verifiedEPSS %0
7.7
CVE-2026-84682
TDDPv2 setProductVer Command Injection in Archer AX90
TS
Patch verifiedEPSS %1
7.7
CVE-2026-8618
Pre-Authentication Stack-based Buffer Overflow Remote Code Execution in TDDPv2 Subtype 0x91 on Deco M9 Plus
TS
Patch verifiedEPSS %0
8.7
CVE-2026-102369
Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200
TS
Patch verifiedEPSS %0
7.1
CVE-2026-78578
Unauthenticated do Method Onboarding Connect Allows Wi‑Fi Reconfiguration Denial of Service Vulnerability in TP-Link Tapo C120 & C200
TS
Patch verifiedEPSS %0