How many TP-Link er7206 CVEs are in CISA KEV?

None of TP-Link er7206's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of TP-Link er7206 are affected?

2 distinct TP-Link er7206 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in TP-Link er7206 CVEs?

TP-Link er7206's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-269 (Improper Privilege Management), CWE-489 (Active Debug Code), CWE-760 (Use of a One-Way Hash with a Predictable Salt).

How many critical TP-Link er7206 vulnerabilities are there?

TP-Link er7206 has 2 critical and 11 high-severity CVEs.

What is the average severity of TP-Link er7206 CVEs?

The average CVSS base score across TP-Link er7206's scored CVEs is 7.6.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

TP-Link

14 CVEs

TP-Link er7206 Vulnerabilities

Name: TP-Link er7206 vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for er7206 by TP-Link.

14

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

7

Public exploits

PoC or exploit code

7.6

Avg CVSS

2024–2026

Last updated January 22, 2026

Overview

TP-Link er7206 has 14 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting TP-Link er7206, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of TP-Link er7206's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High11

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of TP-Link er7206's CVEs are currently listed in CISA's KEV catalog.

Public exploits

7

7 of TP-Link er7206's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every TP-Link er7206 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 1.4.11 CVE
2.0 <= v <= 2.01 CVE

Find a version

14 CVEs

Sort

Authentication Weakness on Omada Controllers, Gateways and Access Points
CVE-2025-9290
Patch
CWE-760
Medium · CVSS 6.0
EPSS 0.2% (10th pct)2026-01-22
Unauthorized root access via debug functionality
CVE-2025-7851
Patch
CWE-269
High · CVSS 8.7
EPSS 0.6% (47th pct)2025-10-21
Authenticated OS command execution
CVE-2025-7850
Patch
CWE-78
Critical · CVSS 9.3
EPSS 2.0% (78th pct)2025-10-21
OS command injection in multiple parameters
CVE-2025-6542
Patch
CWE-78
Critical · CVSS 9.3
EPSS 0.9% (58th pct)2025-10-21
OS command injection using information obtained from the web management interface
CVE-2025-6541
Patch
CWE-78
High · CVSS 8.6
EPSS 0.7% (48th pct)2025-10-21
High vulnerability · 2024-06-25
CVE-2024-21827
Public exploit
CWE-489
High · CVSS 7.2
EPSS 0.9% (55th pct)2024-06-25
High vulnerability · 2024-02-06
CVE-2023-43482
Public exploit
CWE-78
High · CVSS 7.2
EPSS 3.3% (87th pct)2024-02-06
High vulnerability · 2024-02-06
CVE-2023-36498CWE-78
High · CVSS 7.2
EPSS 3.4% (88th pct)2024-02-06
High vulnerability · 2024-02-06
CVE-2023-47209
Public exploit
CWE-78
High · CVSS 7.2
EPSS 3.4% (88th pct)2024-02-06
High vulnerability · 2024-02-06
CVE-2023-47167
Public exploit
CWE-78
High · CVSS 7.2
EPSS 3.4% (88th pct)2024-02-06
High vulnerability · 2024-02-06
CVE-2023-42664
Public exploit
CWE-78
High · CVSS 7.2
EPSS 3.4% (88th pct)2024-02-06
High vulnerability · 2024-02-06
CVE-2023-46683
Public exploit
CWE-78
High · CVSS 7.2
EPSS 3.4% (88th pct)2024-02-06
High vulnerability · 2024-02-06
CVE-2023-47617CWE-78
High · CVSS 7.2
EPSS 3.4% (88th pct)2024-02-06
High vulnerability · 2024-02-06
CVE-2023-47618
Public exploit
CWE-78
High · CVSS 7.2
EPSS 1.9% (78th pct)2024-02-06

Common weakness types

The CWE weakness categories most often found in TP-Link er7206 CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many TP-Link er7206 CVEs were published each year.

2024

9

2025

4

2026

1

Other TP-Link products

Browse vulnerabilities for other products by TP-Link.

tl-wr841n41 CVEs tl-wr886n firmware40 CVEs tl-wr841n firmware39 CVEs tl-wr886n39 CVEs er5120g26 CVEs er5110g25 CVEs er5110g firmware25 CVEs er5120g firmware25 CVEs

All TP-Link vulnerabilities

Frequently asked questions

Common questions about TP-Link er7206 vulnerabilities.

How many CVEs does TP-Link er7206 have?: TP-Link er7206 has 14 published CVE records since 2024.
How many TP-Link er7206 CVEs are in CISA KEV?: None of TP-Link er7206's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for TP-Link er7206 vulnerabilities?: Yes — 7 of TP-Link er7206's CVEs have a known public exploit.
Which versions of TP-Link er7206 are affected?: 2 distinct TP-Link er7206 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in TP-Link er7206 CVEs?: TP-Link er7206's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-269 (Improper Privilege Management), CWE-489 (Active Debug Code), CWE-760 (Use of a One-Way Hash with a Predictable Salt).
How many critical TP-Link er7206 vulnerabilities are there?: TP-Link er7206 has 2 critical and 11 high-severity CVEs.
What is the average severity of TP-Link er7206 CVEs?: The average CVSS base score across TP-Link er7206's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track TP-Link er7206 vulnerabilities

Monitor new TP-Link er7206 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing