Security Digest
TP-Link: known exploited vulnerabilities
4 TP-Link CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-09-03 | CVE-2025-9377 | TP-Link Multiple Routers TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | 2025-09-24 |
| 2025-09-03 | CVE-2023-50224 | TP-Link TL-WR841N TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | 2025-09-24 |
| 2025-09-02 | CVE-2020-24363 | TP-Link TL-WA855RE TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability | 2025-09-23 |
| 2025-06-16 | CVE-2023-33538 | TP-Link Multiple Routers TP-Link Multiple Routers Command Injection Vulnerability | 2025-07-07 |