TP-Link TL-WR841N Security Advisory: UPnP Null-Ptr & HTTP Heap Overflow (3 CVEs)

Key Information Summary of the Security Advisory for TP-Link TL-WR841N Vulnerability Overview Advisory Title: Security Advisory: Multiple Vulnerabilities in TP-Link TL-WR841N Related CVEs: CVE-2026-76649, CVE-2026-76650, CVE-2026-76651 Vulnerability Types: - CVE-2026-76649: A null pointer dereference vulnerability exists in the UPnP service when processing SOAP requests. A specially crafted SOAP request (containing unexpected XML content) may cause the UPnP daemon to terminate unexpectedly. Successful exploitation can result in the loss of UPnP functionality until the service is restarted or the device is rebooted. - CVE-2026-76650: A pre-authentication null pointer dereference vulnerability exists in the UPnP service when processing SOAP state variable query requests. A crafted request may trigger an unexpected termination or crash of the UPnP process. - CVE-2026-76651: A heap buffer overflow vulnerability exists in the embedded HTTP service. An attacker can overwrite internal buffer boundaries via a specially crafted request, leading to memory modification or corruption, which may cause undefined behavior. Arbitrary code execution, information leakage, and denial-of-service conditions have not yet been demonstrated. CVSS v4.0 Score: All three vulnerabilities are rated 5.3/Medium CVSS Vector: Scope of Impact Remediation Users of affected devices are strongly advised to perform the following actions: 1. Update the firmware to the latest version to fix the vulnerabilities, per the instructions: - US Version: Download for TL-WR841N TP-Link - EU Version: Download for TL-WR841N TP-Link POC/Exploit Code The page does not include POC code or an exploit code block. Disclaimer This advisory is for reference only, and the information may change at any time. TP-Link recommends that customers apply the available firmware updates as soon as possible, or mitigate the documented vulnerabilities as described. TP-Link is not liable for any damage or losses caused by failing to implement the updates.

Goal Reached Thanks to every supporter — we hit 100%!

TP-Link TL-WR841N Security Advisory: UPnP Null-Ptr & HTTP Heap Overflow (3 CVEs)