RuntimeRebel — #TP LinkCybersecurity articles tagged #TP Link on RuntimeRebel.https://runtimerebel.comTP-Link Sued: Router Security Misrepresentation & China Tieshttps://runtimerebel.com/blog/tp-link-sued-router-security-misrepresentation-china-tieshttps://runtimerebel.com/blog/tp-link-sued-router-security-misrepresentation-china-tiesFour U.S. states sue TP-Link over allegations of misleading security claims, undisclosed China ties, and privacy risks affecting consumer routers.Fri, 09 Oct 2026 14:48:06 GMTTP LinkRouter SecuritySupply Chain RiskChinaPrivacyEvooo1Bot Linux Botnet Turns Routers Into SOCKS5 Relayshttps://runtimerebel.com/blog/evooo1bot-linux-botnet-turns-routers-into-socks5-relayshttps://runtimerebel.com/blog/evooo1bot-linux-botnet-turns-routers-into-socks5-relaysA new Mirai-based modular Linux botnet called Evooo1Bot targets internet routers, turning them into SOCKS5 traffic relay nodes.Sat, 15 Aug 2026 16:14:07 GMTDDoSCredential TheftD LinkTP LinkMiraiTP-Link Zero-Trust Provisioning Bugs: 15 Flaws Threaten Securityhttps://runtimerebel.com/blog/tp-link-zero-trust-provisioning-bugs-15-flaws-threaten-securityhttps://runtimerebel.com/blog/tp-link-zero-trust-provisioning-bugs-15-flaws-threaten-securityResearchers uncover 15 TP-Link device bugs that undermine automated zero‑trust provisioning, exposing credential leakage and network compromise.Mon, 10 Aug 2026 09:10:12 GMTTP LinkZero TrustProvisioningNetwork DevicesCredential ExposureTP-Link Archer AX21 RCE via CVE-2023-1389 — Mitigation Guidehttps://runtimerebel.com/blog/tp-link-archer-ax21-rce-via-cve-2023-1389-mitigation-guidehttps://runtimerebel.com/blog/tp-link-archer-ax21-rce-via-cve-2023-1389-mitigation-guideHackers continue targeting discontinued TP-Link Archer AX21 routers with CVE-2023-1389, though many exploitation attempts currently fail to execute payloads.Mon, 20 Apr 2026 08:54:58 GMTCVE-2023-1389TP LinkArcher AX21MooBotMiraiCommand InjectionAPT28 Exploits MikroTik & TP-Link Routers in DNS Hijackinghttps://runtimerebel.com/blog/apt28-exploits-mikrotik-tp-link-routers-in-dns-hijackinghttps://runtimerebel.com/blog/apt28-exploits-mikrotik-tp-link-routers-in-dns-hijackingRussian state-linked APT28 (Forest Blizzard) is compromising insecure SOHO routers globally, employing DNS hijacking for cyber espionage since May 2025.Tue, 07 Apr 2026 20:18:04 GMTAPT28Forest BlizzardSOHO RoutersMikroTikTP LinkDNS HijackingCyber EspionageAPT28 FrostArmada DNS Hijack Campaign Steals Microsoft 365 Loginshttps://runtimerebel.com/blog/apt28-frostarmada-dns-hijack-campaign-steals-microsoft-365-loginshttps://runtimerebel.com/blog/apt28-frostarmada-dns-hijack-campaign-steals-microsoft-365-loginsAuthorities disrupt APT28's FrostArmada campaign, which used DNS hijacking of MikroTik and TP-Link routers to steal Microsoft 365 account credentials.Tue, 07 Apr 2026 16:28:36 GMTAPT28FrostArmadaDNS HijackingMicrosoft 365MikroTikTP LinkCredential TheftCVE-2024-5035: TP-Link Archer C5400X RCE Vulnerability Patchhttps://runtimerebel.com/blog/cve-2024-5035-tp-link-archer-c5400x-rce-vulnerability-patchhttps://runtimerebel.com/blog/cve-2024-5035-tp-link-archer-c5400x-rce-vulnerability-patchTP-Link fixes high-severity flaws including CVE-2024-5035 and CVE-2024-3922, preventing remote code execution and authentication bypass on gaming routers.Fri, 27 Mar 2026 12:25:33 GMTCVE-2024-5035CVE-2024-3922TP LinkArcher C5400XRCERouter SecurityArcher NX200 and NX510v Auth Bypass: CVE-2024-5035 Patch Guidancehttps://runtimerebel.com/blog/archer-nx200-and-nx510v-auth-bypass-cve-2024-5035-patch-guidancehttps://runtimerebel.com/blog/archer-nx200-and-nx510v-auth-bypass-cve-2024-5035-patch-guidanceTP-Link patches critical auth bypass CVE-2024-5035 and command injection in Archer NX routers, preventing unauthorized firmware uploads and remote code execution.Wed, 25 Mar 2026 12:23:09 GMTCVE-2024-5035CVE-2024-5036TP LinkArcher NX200Archer NX510vFirmware Security