Tp-link Archer C7 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Archer C7 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2020-35575 — CVSS 9.8 (critical): A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to…
• CVE-2026-5363 — CVSS 8.8 (high): Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation. The…
• CVE-2023-39224 — CVSS 8.0 (high): Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated…
• CVE-2015-3035 — CVSS 7.5 (high) — actively exploited: Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8…
• CVE-2025-9377 — CVSS 7.2 (high) — actively exploited: The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and…
• CVE-2023-2646 — CVSS 4.5 (medium): A vulnerability has been found in TP-Link Archer C7v2 v2_en_us_180114 and classified as problematic. Affected by this vulnerability is an…