tp-link News Articles

CVE Trends Dashboard

We're in the process of developing the mobile version of our website to improve your browsing experience on smaller screens. Keep an eye out for its release in the near future.Thank you for your patience!

23 hours ago

CVE-2025-40634 TP-Link Archer AX50 conn-indicator stack-based overflow (EUVD-2025-15816)

A vulnerability was found in TP-Link Archer AX50 1.0.11 Build 2022052. It has been declared as critical. This vulnerability is known as CVE-2025-40634. It is recommended to upgrade the affected component.

1 week ago

Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Infects Over 6,000 Devices

Ballista botnet exploits TP-Link router flaw CVE-2023-1389, infecting 6,000+ devices worldwide and evolving to use TOR.

PoC Exploit released for TP-Link Code Execution Vulnerability(CVE-2024-54887)

A researcher has successfully identified a critical vulnerability in the TP-Link TL-WR940N router.

PoC Exploit released for TP-Link Code Execution Vulnerability(CVE-2024-54887)

A serious code execution vulnerability in the TP-Link TL-WR940N router, identified as CVE-2024-54887, PoC exploit.

Exploited TP-Link Vulnerability Spawns Botnet Threats

Half a dozen different botnets are prowling the internet for TP-Link-brand Wi-Fi routers unpatched since last summer with the goal of commandeering them into

New botnet exploits vulnerabilities in NVRs, TP-Link routers

A new Mirai-based malware campaign is actively exploiting unpatched vulnerabilities in Internet of Things (IoT) devices, including DigiEver DS-2105 Pro DVRs.

TP-Link HomeShield Function Vulnerability Let Attackers Inject Malicious Commands

A significant vulnerability has been identified in TP-Link's HomeShield function, affecting a range of their devices, including the Archer, Deco, and Tapo series routers.

IoT Under Siege: The Anatomy of the Latest Mirai Campaign Leveraging Multiple IoT Exploits

Mirai is a still-active botnet with new variants. We highlight observed exploitation of IoT vulnerabilities — due to low complexity and high impact.

TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks

A critical vulnerability (CVE-2024-5035) has been disclosed in the TP-Link Archer C5400X gaming router, allowing remote code execution.

TP-Link fixes critical RCE bug in popular C5400X gaming router

The TP-Link Archer C5400X gaming router is vulnerable to security flaws that could enable an unauthenticated, remote attacker to execute commands on the device.

Botnets continue exploiting year-old flaw in unpatched TP-Link routers

The bug affects the the Archer AX21, a popular router model manufactured by TP-Link.

Multiple botnets exploiting one-year-old TP-Link flaw to hack routers

At least six distinct botnet malware operations are hunting for TP-Link Archer AX21 (AX1800) routers vulnerable to a command injection security issue reported and addressed last year.

Hackers Exploiting TP-Link Archer Command Injection Vulnerability in the Wild

Exploitation of a critical vulnerability in TP-Link Archer routers, leading to the proliferation of various botnet threats.

Botnets Continue Exploiting CVE-2023-1389 for Wide-Scale Spread | FortiGuard Labs

FortiGuard Labs unveils Moobot, Miori, AGoent, Gafgyt and more exploiting TP-Link Archer AX21 vulnerability CVE-2023-1389. Learn more.

CYFIRMA Research - Comprehensive Analysis of CVE-2024-21833 Vulnerability in TP-Link Routers : Threat Landscape, Exploitation Risks, and Mitigation Strategies

Listen to CYFIRMA Research - Comprehensive Analysis Of CVE-2024-21833 Vulnerability In TP-Link Routers : Threat Landscape, Exploitation Risks, And Mitigation Strategies and eighty-one more episodes by CYFIRMA Research, free! No signup or install needed. CYFIRMA Research - Comprehensive Analysis of C...

Cyber Threat Intelligence Reports | Risk Research | Out of Band

Cyber Threat Intelligence Reports and the latest research on Cybersecurity risks applicable to an organization, its industry, and geography.

Millions of Routers at Risk: CVE-2024-21833 Threatens TP-Link Devices

There is no publicly available PoC exploit for CVE-2024-21833. Evidence from underground forums indicates active exploitation of this flaw

TP-Link WAN-Side Vulnerability Exploited to Install Mirai Malware

Mirai botnet exploits CVE-2023-1389 to add TP-Link Archer A21 (AX1800) routers to DDoS attacks. During the Pwn2Own Toronto event in December 2022.

Condi is a new botnet-for-hire with a business plan

Security enterprise FortiGuard Labs recently found samples of a "DDoS-as-a-service" botnet that calls itself Condi, a threat designed to spread via insecure TP-Link Archer AX21 (AX1800) routers....

Mirai Botnet Exploits TP-Link Router Vulnerability: What to Know and How to Protect Your Device | Trend Micro News

Mirai botnet is targeting TP-Link router model to expand its reach by exploiting a flaw, known as CVE-2023-1389, which discovered in December.

CISA warns of Mirai botnet exploiting TP-Link routers

The US government's Cybersecurity and Infrastructure Security Agency (CISA) is adding three more flaws to its list of known-exploited vulnerabilities, including one involving TP-Link routers that is being...

TP-Link Archer WiFi router flaw exploited by Mirai malware

The Mirai malware botnet is actively exploiting a TP-Link Archer A21 (AX1800) WiFi router vulnerability tracked as CVE-2023-1389 to incorporate devices into DDoS (distributed denial of service) swarms.