TP-Link Technologies Co Ltd. Archer AX10

Name: TP-Link Technologies Co Ltd. Archer AX10
Brand: TP-Link Technologies Co Ltd.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical4high1medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-9961US	—	10.3% (96th)	Exploit	no fix	2025-09-06	≤ 1.2.1
CVE-2022-41540US	medium5.9OT elevated	1.42% (73rd)	Exploit	no fix	2022-10-18	≤ 211117
CVE-2021-40288US	high7.5	2.29% (83rd)	—	no fix	2021-12-07	≤ 1_211014
CVE-2021-41450US	high7.5	1.83% (79th)	—	no fix	2021-12-08	≤ 211117
CVE-2022-41541US	high8.1OT elevated	1.51% (74th)	—	no fix	2022-10-18	≤ 211117
CVE-2023-34832US	critical9.8	1.36% (72nd)	—	no fix	2023-06-16	≤ 230220
CVE-2025-29089US	—	0.50% (42nd)	—	no fix	2025-09-09	≤ 20240130
CVE-2023-40357US	high8.0	0.49% (42nd)	—	no fix	2023-09-06	≤ 230508

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-290Authentication Bypass by Spoofing1 CVEs
CWE-294Authentication Bypass by Capture-replay1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs
CWE-668Exposure of Resource to Wrong Sphere1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.