Report a Vulnerability

How can we reach you?

We acknowledge every report within 5 business days. Only two fields are required here.

Name or handle * Email address * All correspondence and your tracking ID go here. Country optional Affiliation optional

Encrypted replies — optional Your PGP public key optional Provide this if you want our replies encrypted. You can also send it later.

What did you find, and where?

Pick the product type first — we will only ask for fields that apply to it.

Product type *

One-line summary * A short title. Technical detail comes on the next step.

Vulnerability type * Model or endpoint *

Severity, your assessment * CVSS base score optional Leave blank if you have not scored it.

Technical detail

Reproduction steps are what we need most. Everything else on this step is optional and can follow later.

Steps to reproduce *

Attack vector optional Authentication required optional Date discovered optional Tools used optional

Impact if exploited optional Suggested fix or mitigation optional

Proof of concept and evidence

Optional but strongly encouraged — it speeds up validation considerably.

📎

Drop files here or click to browse

Archives: .zip, .gz, .7z — up to 100 MB · Other files up to 10 MB each

Before you archive

✓Allowed inside archives: .txt .md .log .pcap .pcapng .png .jpg .jpeg .pdf .xlsx

✓Rename scripts or source code to .txt or .md before archiving — executable extensions are rejected by the scanner.

Review and submit

Check everything below. You can jump back to any step to edit.

I confirm this is a security vulnerability report, not a general support request. I understand TP-Link may use this information for vulnerability handling, coordinated remediation, researcher communication and applicable regulatory obligations.

How can we reach you?

What did you find, and where?

Technical detail

Proof of concept and evidence

Review and submit

Report received

Within 5 business days

Attachment scanning

Progress updates