CVE-2026-3622highCWE-125

CVE-2026-3622: falha de alta gravidade em TP-Link Systems Inc. TL-WR841N v14

Denial-of-Service Vulnerability in UPnP Component of TP Link's TL-WR841N

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TL-WR841N

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.4%
The vulnerability exists in the UPnP component of TL-WR841N v14, where improper input validation leads to an out-of-bounds read, potentially causing a crash of the UPnP service. Successful exploitation can cause the UPnP service to crash, resulting in a Denial-of-Service condition.  This vulnerability affects TL-WR841N v14 < EN_0.9.1 4.19 Build 260303 Rel.42399n (V14_260303) and < US_0.9.1.4.19 Build 260312 Rel. 49108n (V14_0304).
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
TP-Link Systems Inc. · TL-WR841N v14
CVEs relacionadas — TP-Link Systems Inc. TL-WR841N v14

No mesmo produto, das mais perigosas para as menos.

CVE-2026-3227HIGHAuthenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840NEPSS 1.9%CVE-2026-9105MEDIUMAuthenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web InterfaceEPSS 1.1%CVE-2025-9014MEDIUMNull Pointer Dereference Vulnerability on TL-WR841NEPSS 0.5%