CVE-2026-76649mediumCWE-476

CVE-2026-76649: falha de média gravidade em TP-Link System Inc. TL-WR841N v14

Pre-Authentication NULL Pointer Dereference in UPnP SOAP Action Request Processing in TP-Link TL-WR841N

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TL-WR841N

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.3%
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a denial-of-service condition affecting UPnP functionality until the service is restarted or the device is rebooted.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Produtos afetados
TP-Link System Inc. · TL-WR841N v14
CVEs relacionadas — TP-Link System Inc. TL-WR841N v14

No mesmo produto, das mais perigosas para as menos.

CVE-2026-102294HIGHAuthenticated OS Command Injection in TL-WR841N IPv6 WAN ConfigurationEPSS 0.9%CVE-2026-76651MEDIUMPre-Authentication Multipart Boundary Buffer Overflow in HTTP Service in TP-Link TL-WR841NEPSS 0.4%CVE-2026-76650MEDIUMPre-Authentication NULL Pointer Dereference in UPnP SOAP State Variable Query Processing in TP-Link TL-WR841NEPSS 0.3%