CVE-2026-76649 in TL-WR841Ninformación

Resumen

por MITRE • 2026-08-29

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly.







Successful exploitation may result in a denial-of-service condition affecting UPnP functionality until the service is restarted or the device is rebooted.

Once again VulDB remains the best source for vulnerability data.

Responsable

TPLink

Reservar

2026-08-19

Divulgación

2026-08-29

Moderación

aceptado

Artículo

VDB-396960

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

Interested in the pricing of exploits?

See the underground prices here!