TP-Link Tl-WR840N Firmware vulnerabilities

22 CVEs affecting TP-Link Tl-WR840N Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-3227, published 2026-03-16.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-50224: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability, published 2024-05-03. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2025-09-03. EPSS: 20% chance of exploitation in the next 30 days. TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected…
• CVE-2021-41653, published 2021-11-13. Critical severity, CVSS 9.8. EPSS: 76% chance of exploitation in the next 30 days. The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.
• CVE-2018-11714, published 2018-06-04. Critical severity, CVSS 9.8. EPSS: 67.1% chance of exploitation in the next 30 days. An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused…
• CVE-2022-25061, published 2022-02-25. Critical severity, CVSS 9.8. EPSS: 58.7% chance of exploitation in the next 30 days. TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.
• CVE-2022-25060, published 2022-02-25. Critical severity, CVSS 9.8. EPSS: 40.2% chance of exploitation in the next 30 days. TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.
• CVE-2022-25064, published 2022-02-25. Critical severity, CVSS 9.8. EPSS: 36.5% chance of exploitation in the next 30 days. TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.
• CVE-2020-36178, published 2021-01-06. Critical severity, CVSS 9.8. EPSS: 9.8% chance of exploitation in the next 30 days. oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command injection because a raw string entered from the web interface (an IP address field) is used directly for…
• CVE-2018-15172, published 2018-08-15. High severity, CVSS 7.5. EPSS: 8.3% chance of exploitation in the next 30 days. TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.
• CVE-2019-15060, published 2019-08-22. High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days. The traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1 3.16 is vulnerable to remote code execution via a crafted payload in an IP address input field.
• CVE-2022-25062, published 2022-02-25. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted…

Latest

• CVE-2026-3227, published 2026-03-16. Medium severity, CVSS 6.8. EPSS: 1.9% chance of exploitation in the next 30 days. A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router…
• CVE-2023-39471, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link…
• CVE-2022-29402, published 2022-05-25. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute…
• CVE-2021-46122, published 2022-04-18. High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days. Tp-Link TL-WR840N (EU) v6.20 Firmware (0.9.1 4.17 v0001.0 Build 201124 Rel.64328n) is vulnerable to Buffer Overflow via the Password reset feature.
• CVE-2022-26642, published 2022-03-28. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.
• CVE-2022-26641, published 2022-03-28. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter.
• CVE-2022-26640, published 2022-03-28. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter.
• CVE-2022-26639, published 2022-03-28. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter.