CVE-2026-9105: TP-Link TL-WR841N Firmware

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14. A remote authenticated attacker can send crafted HTTP requests to cause the embedded web server to overflow a stack buffer, resulting in a crash of the affected process. Successful exploitation results in a denial-of-service condition, causing the device to crash and automatically reboot.

Affected products

• TP-Link TL-WR841N Firmware: before 14_260518 (fixed in 14_260518)

Published 2026-06-29. Last modified 2026-07-01.