Attack list
TP-Link router
6 attacked bugs
No new TP-Link router attack bugs lately.
What to do
Open the router's app or admin page and install any firmware update. If it no longer gets updates, replace it.
Attackers keep using these against anything that hasn't updated. Updating closes them.
BugConfirmed in attacks
- TP-Link TL-WR841N bug: authentication bypass by spoofingCVE-2023-50224Sep 3, 2025
- TP-Link bug: archer c7(eu) and tl-wr841n/nd(ms) OS command injectionCVE-2025-9377Sep 3, 2025
- TP-Link TL-WA855RE bug: tl-wa855re missing authentication for critical functionCVE-2020-24363Sep 2, 2025
- TP-Link bug: command injectionCVE-2023-33538Jun 16, 2025
- TP-Link Archer AX21 bug: ax-21 command injectionCVE-2023-1389May 1, 2023
- TP-Link bug: devices directory traversalCVE-2015-3035Mar 25, 2022
From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.