Tp-link Archer C20 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Archer C20 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-37284 — CVSS 8.8 (high): Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent…
• CVE-2026-0834 — CVSS 8.8 (high): Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent…
• CVE-2023-30383 — CVSS 7.5 (high): TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228…
• CVE-2026-75616 — CVSS 6.8 (medium): An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related…
• CVE-2025-15551 — CVSS 5.6 (medium): The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by…