TP-Link patches CVE-2025-14756 (CVSS 8.5) in Archer MR600 routers. This command injection flaw allows full device takeover. Update firmware now.
TP-Link
TP-Link patches critical VIGI camera flaw (CVE-2026-0629). LAN attackers can reset admin passwords and hijack feeds. Update firmware now.
A flaw (CVE-2023-28760) in TP-Link AX1800 routers allows unauthenticated attackers on the LAN to gain root RCE by manipulating the MiniDLNA service via a USB drive.
A new report reveals a CWMP service flaw in TP-Link routers that can be exploited for RCE. Researchers have published a detailed write-up and a PoC on GitHub.
CISA has added two TP-Link router flaws to its KEV Catalog, including an RCE vulnerability in end-of-life devices. Both are being actively exploited in the wild.
CISA adds two flaws to its KEV Catalog: a TP-Link factory reset flaw and a WhatsApp zero-click vulnerability used in targeted spyware attacks. Patching is urgent.
TP-Link has patched a high-severity flaw (CVE-2025-8627) in its KP303 Smart Plug. The vulnerability allows remote attackers to issue unauthenticated commands.
The EOL TP-Link Archer C50 router has a critical hardcoded DES key (CVE-2025-6982), allowing attackers to decrypt sensitive configuration files, including admin credentials and Wi-Fi passwords.
TP-Link warns of two critical command injection flaws (CVE-2025-7723, -7724) in VIGI NVRs, allowing remote attackers to execute arbitrary commands, even unauthenticated. Update immediately.
CISA adds two actively exploited zero-days to KEV: an iOS zero-click flaw used by spyware (CVE-2025-43200) and a command injection in TP-Link routers
A critical vulnerability (CVE-2025-40634) in TP-Link Archer AX50 routers allows remote code execution as root. A public PoC increases the risk.
TP-Link WR841N routers are vulnerable to a stored XSS attack. Update firmware and change your password to protect your device from potential admin password theft.
Discover CVE-2024-57040, a critical vulnerability in TP-Link routers that exposes root credentials and risks full control.
Discover the resurgence of the XorBot botnet, a potent threat to IoT devices worldwide. Learn about its advanced anti-detection mechanisms and wide range of exploits.
Discover the concerns surrounding TP-Link routers and the potential cybersecurity risks they pose. Find out why two members of Congress are urging an investigation.
A vulnerability has been discovered in TP-Link VIGI NVR4032H network video recorder, a device widely used in surveillance systems
There is no publicly available PoC exploit for CVE-2024-21833. Evidence from underground forums indicates active exploitation of this flaw