vendor

tp-link

14 thingsrelated by NVD

Severity

high 8 medium 6

Its products

omada ds1008x 7 omada ds1008x firmware 7 omada ds1016g 7 omada ds1016g firmware 7 omada ds1016ge 7 omada ds1016ge firmware 7 omada ds1018gmp 7 omada ds1018gmp firmware 7 omada ds1024g 7 omada ds1024g firmware 7 omada ds105g 7 omada ds105g-m2 7 omada ds105g-m2 firmware 7 omada ds105g firmware 7 omada ds105ge 7 omada ds105ge firmware 7 omada ds105gp 7 omada ds105gp firmware 7 omada ds105x 7 omada ds105x firmware 7 omada ds106gpp 7 omada ds106gpp firmware 7 omada ds106p 7 omada ds106p firmware 7 omada ds108g 7 omada ds108g-m2 7 omada ds108g-m2 firmware 7 omada ds108g firmware 7 omada ds108ge 7 omada ds108ge firmware 7 omada ds108gp 7 omada ds108gp firmware 7 omada ds110gmp 7 omada ds110gmp firmware 7 omada ds111p 7 omada ds111p firmware 7 omada eap610 7 omada eap610-outdoor 7 omada eap610-outdoor firmware 7 omada eap610 firmware 7

The 40 with the most things, of 233.

Being told

Watch: its feed Ask more of it

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Every thing

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and BE3600 v1 (vpn modules) allows adjacent authenticated attacker… CVE-2026-22223	Severity high
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1 allows adjacent authenticated attacker… CVE-2026-22221	Severity high
An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1 and AXE75 v1… CVE-2026-0631	Severity high
Heap-based Buffer Overflow vulnerability in Archer AX53 v1.0 and AX12 v1.0 (tdpserver modules) allows adjacent attackers to cause a… CVE-2025-62673	Severity high
A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does… CVE-2025-15631	Severity medium
A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption… CVE-2025-15630	Severity medium
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between… CVE-2025-15629	Severity high
Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed… CVE-2025-15628	Severity high
A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust… CVE-2025-15627	Severity high
A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site… CVE-2025-15544	Severity medium
The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5 exposes a connectAP interface without proper authentication. An… CVE-2025-14300	Severity high
A vulnerability in the SSH server of TP-Link TL-WR820N v2.80 allows the use of a weak cryptographic algorithm, enabling an adjacent… CVE-2025-14175	Severity medium
A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity… CVE-2025-9291	Severity medium
A stack-based buffer overflow vulnerability was identified in the ONVIF SOAP XML Parser in Tapo C200 v3 and C520WS v2.6. When processing… CVE-2025-8065	Severity medium