CVE-2022-26642: TP-Link Tl-WR840N Firmware

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.

Affected products

• TP-Link Tl-WR840N Firmware: version 0.9.1.4.16 only

Published 2022-03-28. Last modified 2026-06-17.