TP-Link Faces 5 State Lawsuits: Are Its Routers Still Legal in the US?

**Executive summary:** US states have filed coordinated lawsuits accusing TP-Link of deceptive security marketing and insufficient disclosure about Chinese affiliate relationships; simultaneously, regulators (FCC) added foreign-produced routers to a restricted list. Security researchers disclosed five Aginet-related CVEs—including authentication bypass, authorization flaws, hardcoded keys, a USB-based file exposure, and authenticated command injection—that can lead to full device compromise in some scenarios; the article recommends inventorying affected devices, confirming firmware/patch status (including ISP-specific firmware), reducing network exposure, and reviewing procurement/FCC authorization for new models.