CVE-2026-76650: falha de média gravidade em TP-Link System Inc. TL-WR841N v14
Pre-Authentication NULL Pointer Dereference in UPnP SOAP State Variable Query Processing in TP-Link TL-WR841N
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
A NULL
pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing
SOAP state variable query requests. A specially crafted SOAP query may trigger
unexpected termination or instability of the process hosting the UPnP service.
Successful
exploitation may result in a denial-of-service condition affecting UPnP
discovery, state query, or related management functionality until the affected
process is restarted or the device is rebooted.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Produtos afetados
TP-Link System Inc. · TL-WR841N v14CVEs relacionadas — TP-Link System Inc. TL-WR841N v14
No mesmo produto, das mais perigosas para as menos.
CVE-2026-102294HIGHAuthenticated OS Command Injection in TL-WR841N IPv6 WAN ConfigurationEPSS 0.9%CVE-2026-76651MEDIUMPre-Authentication Multipart Boundary Buffer Overflow in HTTP Service in TP-Link TL-WR841NEPSS 0.4%CVE-2026-76649MEDIUMPre-Authentication NULL Pointer Dereference in UPnP SOAP Action Request Processing in TP-Link TL-WR841NEPSS 0.3%