CVE-2026-11409— OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1068 · Exploitation for Privilege EscalationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| TP-Link Systems Inc. | TL-WR940N v6 | < V6_260528 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-11409
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N
Source: NVD (National Vulnerability Database)
Vulnerability Description
An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
TP-Link Systems Inc TL-WR940N v6 命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TP-Link Systems Inc TL-WR940N v6是TP-Link Systems Inc公司的一款无线路由器。 TP-Link Systems Inc TL-WR940N v6 V6_260528之前版本存在安全漏洞，该漏洞源于IPv6 PPPoE配置处理器中用户输入清理不当，可能导致经过身份验证的攻击者利用管理权限执行任意系统命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TP-Link Systems Inc. | TL-WR940N v6 | 0 ~ V6_260528 | - |
II. Public POCs for CVE-2026-11409
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-11409
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-11409 (1)
Vendor Pages for CVE-2026-11409 (1)
IV. Related Vulnerabilities
Same vendor: TP-Link Systems Inc.
- CVE-2026-8699
Stored Cross-Site Scripting (XSS) in TP-Link Archer C5 Web M - CVE-2026-10562
Unauthenticated Open Redirect Vulnerability on TP-Link Arche - CVE-2026-9105
Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR84 - CVE-2026-12760
Denial-of-Service Vulnerability via Malformed IPv4 Fragmenta - CVE-2026-11834
Unauthenticated Command Injection via DHCP Option Handling i
Same weakness: CWE-78
- CVE-2026-15496
SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.jav - CVE-2026-15495
SonicCloudOrg sonic-agent Android WebSocket Server AndroidWS - CVE-2026-15487
TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os - CVE-2026-15486
TRENDnet TEW-821DAP Firmware Update tools_ddns sub_42026C os - CVE-2026-15485
TRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os
V. Comments for CVE-2026-11409
No comments yet