On October 6, 2026, Florida, Iowa, Montana and Nebraska sued TP-Link for misleading consumers about router security, while the FCC still denies it an exemption to the ban on routers made outside the US. In parallel, SEC Consult detailed five flaws in the Aginet line — CVE-2025-30237 through CVE-2025-30241 — some of which will never be patched on affected models: inventory your TP-Link hardware before trusting its update channel.

TP-Link announced the Archer 8, the first router built on Wi-Fi 8 (IEEE 802.11bn), slated to ship this month: the standard changes direction and targets real-world reliability rather than a higher peak throughput. If dead zones or congestion are a problem today, buy Wi-Fi 7 now instead of waiting for a standard that will not be finalized until around 2028.

Forescout Vedere Labs presented 15 zero-touch provisioning vulnerabilities in TP-Link Omada at Black Hat USA, including 11 CVEs. SMBs deploying network gear via ZTP must patch immediately and rotate all exposed secrets.