CVE-2026-102294— Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration
Quick assessment
Affected
TP-Link System Inc. TL-WR841N v14
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
TP-Link TL-WR841N 存在一个经过身份验证的操作系统命令注入漏洞，位于 IPv6 WAN 配置中。攻击者可将精心构造的 IPv6 网关值不当嵌入到系统命令中，从而允许经过身份验证的管理员执行任意操作系统命令。 成功利用该漏洞可能导致未授权访问敏感信息、篡改设备配置或服务，以及干扰设备的正常运行。
Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| TP-Link System Inc. | TL-WR841N v14 | < 4.19 Build 260821 (EN) |
affected |
< 4.19 Build 260820 (US) |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-102294
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration
Source: CVE Program / CVE List V5
Vulnerability Description
TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands.
Successful exploitation may allow unauthorized access to sensitive information, modification of device configuration or services, and disruption of device operation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TP-Link System Inc. | TL-WR841N v14 | 0 ~ 4.19 Build 260821 (EN) | - |
|
II. Public POCs for CVE-2026-102294
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-102294
请登录查看更多情报信息。
Vendor Pages for CVE-2026-102294 (2)
IV. Related Vulnerabilities
Same product: TL-WR841N v14
-
CVE-2026-76651
Pre-Authentication Multipart Boundary Buffer Overflow in HTT -
CVE-2026-76650
Pre-Authentication NULL Pointer Dereference in UPnP SOAP Sta -
CVE-2026-76649
Pre-Authentication NULL Pointer Dereference in UPnP SOAP Act -
CVE-2026-9105
Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR84 -
CVE-2026-3622
Denial-of-Service Vulnerability in UPnP Component of TP Link
Same vendor: TP-Link System Inc.
-
CVE-2026-81531
Unauthenticated Account Information Disclosure in Multiple O -
CVE-2026-76651
Pre-Authentication Multipart Boundary Buffer Overflow in HTT -
CVE-2026-76650
Pre-Authentication NULL Pointer Dereference in UPnP SOAP Sta -
CVE-2026-76649
Pre-Authentication NULL Pointer Dereference in UPnP SOAP Act -
CVE-2026-22223
Command Injection Vulnerability on TP-Link Archer BE230 v1.2
Same weakness: CWE-78
-
CVE-2026-75937
OS Command Injection in Digi Accelerated Linux (DAL OS) -
CVE-2026-104019
OS command injection in the Studio Space startup validation -
CVE-2026-104859
Nx: OS command injection in the @nx/docker release pipeline -
CVE-2026-93698
Multilang adminbin验证不足致任意命令执行 -
CVE-2026-71452
Johnson Controls EasyIO FS32 3.0b63以下命令注入漏洞
V. Comments for CVE-2026-102294
No comments yet