CVE-2018-20372: TP-Link Td-w8961nd Firmware

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client.

Affected products

• TP-Link Td-w8961nd Firmware: version 1.0.1 only

Published 2018-12-23. Last modified 2026-06-17.