TP-Link Sued by Four More U.S. States Over Router Security and China Ties
Four more U.S. states sued TP-Link over router security claims and alleged China ties.
61
- Mentions · 7d0
- Mentions · 30d2
- All mentions5
- First seenSep 2, 2026
- Last mentioned21d ago
Timeline
5 articles · newest firstTP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
Four US states sue TP-Link over misleading security claims, citing Aginet ISP router flaws enabling unauthenticated full device compromise.
55
Inside the Telecom Attack Surface: SS7, BGP Hijacking, and the Technical Reality of Nation-State Intrusions
Nation-state actors abuse SS7, BGP, and unpatched telecom routers, including Salt Typhoon persistence via GRE tunnels.
60
The Machines Are Calling: Measuring Automated and Synthetic Voices in Unwanted Inbound Calls
Voice honeypot measurement finds at least 26.9% of unwanted US inbound calls open with machine voices, 13.1% with fresh synthetic speech.
33
FCC proposes public scorecard to rate telecoms on anti-robocall efforts
The FCC proposed a public scorecard rating telecoms' anti-robocall effectiveness and removed 14 providers from US networks for compliance failures.
25
Related CVEs
by mentions- CVE-2023-20198100%10.0Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)
- CVE-2024-3400100%10.0Unauthenticated Root Command Injection in Palo Alto Networks PAN-OS GlobalProtect
- CVE-2024-21887100%9.1Command Injection RCE in Ivanti Connect Secure and Policy Secure
- CVE-2023-46805100%8.2Authentication Bypass in Ivanti Connect Secure and Policy Secure Web Component
- CVE-2023-2027393%7.2Authenticated Command Injection (Root) in Cisco IOS XE Web UI
- CVE-2023-5022420%6.5Authentication Bypass by Spoofing in TP-Link TL-WR841N Router Exposes Stored Credentials
- CVE-2025-30237<1%8.7The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain…
- CVE-2025-30241<1%8.6Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level…
- CVE-2025-30238<1%8.6In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations
- CVE-2025-30239<1%8.5In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker…
Appears with
- Volt Typhoonthreat actor · 2
- Flax Typhoonthreat actor · 2
- Ciscovendor · 1
- Industry Traceback Grouporganization · 1
- Russian military intelligencethreat actor · 1
- GlobalProtectproduct · 1
- CISAorganization · 1
- Palo Alto Networksvendor · 1
- TP-Linkorganization · 1
- TP-Linkvendor · 1
- FBIorganization · 1
- Archer AX21product · 1
- Horse Shellmalware · 1
- FCCvendor · 1
- Tapoproduct · 1
- Tetherproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.