TP-Link Systems Inc Archer c20 v6 vulnerabilities

2 CVEs affecting TP-Link Systems Inc Archer c20 v6, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-12001, published 2026-07-27.

More from TP-Link Systems Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-11834, published 2026-06-22. High severity, CVSS 8.7. EPSS: 0.7% chance of exploitation in the next 30 days. A command injection vulnerability has been identified in the DHCP option processing logic in multiple TP-Link router models, due to insufficient validation of externally supplied DHCP option data. An…
• CVE-2026-12001, published 2026-07-27. Medium severity, CVSS 5.2. EPSS: 0.3% chance of exploitation in the next 30 days. A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5).  Authentication-related…