TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
Four US states sue TP-Link over misleading security claims, citing Aginet ISP router flaws enabling unauthenticated full device compromise.
55
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 16, 2026
- Last mentionedOct 8, 2026
Timeline
2 articles · newest firstZero-Day Flaw in TP-Link Cameras Enables Eavesdropping
OPSWAT disclosed two zero-days in TP-Link Tapo C200 cameras: CVE-2026-15315 authentication replay bypass enabling surveillance and CVE-2026-15316 denial-of-service, both patched in firmware.
52
Related CVEs
by mentions- CVE-2026-15315<1%8.7Authentication Bypass via Challenge Validation Flaw in TP-Link Tapo C120/C200 Cameras
- CVE-2025-30237<1%8.7The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain…
- CVE-2025-30241<1%8.6Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level…
- CVE-2025-30238<1%8.6In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations
- CVE-2025-30239<1%8.5In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker…
- CVE-2026-15316<1%7.1Unauthenticated Input Validation DoS in TP-Link Tapo C200 v5 Configuration Service
- CVE-2025-30240<1%5.1The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices
Appears with
- OPSWATvendor · 1
- OPSWATorganization · 1
- SEC Consultorganization · 1
- TP-Linkvendor · 1
- Suzu Labsorganization · 1
- Flax Typhoonthreat actor · 1
- FCCorganization · 1
- Tapo C200product · 1
- Suzu Labsvendor · 1
- Volt Typhoonthreat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.