TP-Link Tl-WR820N Firmware vulnerabilities

2 CVEs affecting TP-Link Tl-WR820N Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15141, published 2026-08-12.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-14175, published 2025-12-29. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the SSH server of TP-Link TL-WR820N v2.80 allows the use of a weak cryptographic algorithm, enabling an adjacent attacker to intercept and decrypt SSH traffic. Exploitation may…
• CVE-2026-15141, published 2026-08-12. Medium severity, CVSS 5.7. EPSS: 0.1% chance of exploitation in the next 30 days. The web interface of the affected device relies on the HTTP referrer header as part of request validation.  Requests containing empty Referer value, or omitting the Referer header entirely, may be…