TP-Link Archer c7 Firmware vulnerabilities

8 CVEs affecting TP-Link Archer c7 Firmware, 3 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5363, published 2026-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-3035: TP-Link Multiple Archer Devices Directory Traversal Vulnerability, published 2015-04-22. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 83.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500…
CVE-2025-9377: TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability, published 2025-08-29. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2025-09-03. EPSS: 37.7% chance of exploitation in the next 30 days. The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9. This issue affects Archer C7(EU) V2: before…
CVE-2023-50224: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability, published 2024-05-03. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2025-09-03. EPSS: 20% chance of exploitation in the next 30 days. TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected…
CVE-2020-35575, published 2020-12-26. Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days. A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before…
CVE-2023-39224, published 2023-09-06. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer…
CVE-2024-53623, published 2024-11-29. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Incorrect access control in the component l_0_0.xml of TP-Link ARCHER-C7 v5 allows attackers to access sensitive information.
CVE-2023-2646, published 2023-05-11. Medium severity, CVSS 4.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been found in TP-Link Archer C7v2 v2_en_us_180114 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component GET Request Parameter…
CVE-2026-5363, published 2026-04-16. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation. The web interface encrypts the admin password client-side using…