The FCC and four US states target TP-Link while five Aginet flaws remain unpatched

On October 6, 2026, Florida, Iowa, Montana and Nebraska sued TP-Link for misleading consumers about router security, while the FCC still denies it an exemption to the ban on routers made outside the US. In parallel, SEC Consult detailed five flaws in the Aginet line — CVE-2025-30237 through CVE-2025-30241 — some of which will never be patched on affected models: inventory your TP-Link hardware before trusting its update channel.