CVE-2025-9014: TP-Link TL-WR841N Firmware

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation.  A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N v14: before 250908.

Affected products

• TP-Link TL-WR841N Firmware: before 250908 (fixed in 250908)

Published 2026-01-15. Last modified 2026-06-17.