TP-Link Tl-WR802N Firmware vulnerabilities

5 CVEs affecting TP-Link Tl-WR802N Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-3227, published 2026-03-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-29302, published 2021-04-12. High severity, CVSS 8.1. EPSS: 5.9% chance of exploitation in the next 30 days. TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attack vector is: The attacker can get shell of the…
CVE-2021-4144, published 2021-12-23. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection.
CVE-2026-3227, published 2026-03-16. Medium severity, CVSS 6.8. EPSS: 1.9% chance of exploitation in the next 30 days. A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router…
CVE-2021-3275, published 2021-03-26. Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days. Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless AC routers), Access Points, ADSL + DSL Gateways and Routers, which affects…
CVE-2023-36489, published 2023-09-06. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to…