TP-Link Archer NX200 Firmware vulnerabilities

4 CVEs affecting TP-Link Archer NX200 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-15605, published 2026-03-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-15517, published 2026-03-23. High severity, CVSS 8.1. EPSS: 3% chance of exploitation in the next 30 days. A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker…
CVE-2025-15519, published 2026-03-23. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An…
CVE-2025-15518, published 2026-03-23. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An…
CVE-2025-15605, published 2026-03-23. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated…