---
title: "TP-Link: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/tp-link/
description: "Every TP-Link vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (4), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2025-09-03
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# TP-Link: known exploited vulnerabilities

- 2025-09-03 [CVE-2025-9377](https://erroneo.us/security/cve/CVE-2025-9377/index.md) TP-Link Multiple Routers: TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability (due 2025-09-24; ransomware: Unknown)
- 2025-09-03 [CVE-2023-50224](https://erroneo.us/security/cve/CVE-2023-50224/index.md) TP-Link TL-WR841N: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability (due 2025-09-24; ransomware: Unknown)
- 2025-09-02 [CVE-2020-24363](https://erroneo.us/security/cve/CVE-2020-24363/index.md) TP-Link TL-WA855RE: TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability (due 2025-09-23; ransomware: Unknown)
- 2025-06-16 [CVE-2023-33538](https://erroneo.us/security/cve/CVE-2023-33538/index.md) TP-Link Multiple Routers: TP-Link Multiple Routers Command Injection Vulnerability (due 2025-07-07; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/tp-link/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt