TP-Link Td-w8961nd Firmware vulnerabilities

2 CVEs affecting TP-Link Td-w8961nd Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-15606, published 2026-03-23.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-20372, published 2018-12-23. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client.
• CVE-2025-15606, published 2026-03-23. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. A Denial-of-Service (DoS) vulnerability in the httpd component of TP-Link's TD-W8961N v4.0 due to improper input sanitization, allows crafted requests to trigger a processing error that causes the…