Firewalls, VPNs and routers

TP-Link security incident history

Updated Oct 26, 2026. Data gathered daily from official public sources.

As of Oct 26, 2026, Vendor History found 6 actively exploited security flaws for TP-Link, dated Mar 25, 2022 to Sep 3, 2025. Sources checked: the California and Washington Attorney General breach lists and CISA's Known Exploited Vulnerabilities catalog.

Breach notices and SEC cyber filings

None found in the sources we check.

Got a breach letter from TP-Link? What to do when a vendor has a data breach.

Actively exploited security flaws

Flaws in TP-Link products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.

1. Sep 3, 2025Exploited flaw

   TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability (CVE-2023-50224). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

2. Sep 3, 2025Exploited flaw

   TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability (CVE-2025-9377). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

3. Sep 2, 2025Exploited flaw

   TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability (CVE-2020-24363). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

4. Jun 16, 2025Exploited flaw

   TP-Link Multiple Routers Command Injection Vulnerability (CVE-2023-33538). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

5. May 1, 2023Exploited flaw

   TP-Link Archer AX-21 Command Injection Vulnerability (CVE-2023-1389). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

6. Mar 25, 2022Exploited flaw

   TP-Link Multiple Archer Devices Directory Traversal Vulnerability (CVE-2015-3035). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works

To cite: Vendor History, "TP-Link security incident history," vendorhistory.com/vendor/tp-link, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.