CVE-2025-11676CWE-20

CVE-2025-11676

published November 20, 2025

CVSS
7.1
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

Improper input validation vulnerability in TP-Link System Inc. TL-WR940N V6 (UPnP modules), which allows unauthenticated adjacent attackers to perform DoS attack. This issue affects TL-WR940N V6 <= Build 220801.

The record
Technical detail
CVSS
7.1 · NONE
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-11-20T20:17Z
References (3)
https://www.tp-link.com/en/support/download/tl-wr940n/v6/#Firmware · f23511db-6c3e-4e32-a477-6aa17d310630https://www.tp-link.com/en/support/faq/4755/ · f23511db-6c3e-4e32-a477-6aa17d310630https://www.tp-link.com/us/support/download/tl-wr940n/v6/#Firmware · f23511db-6c3e-4e32-a477-6aa17d310630
EPSS history
Timeline
  • 20 NOV 08:09Z
    UPnP DOS in TL-WR940N V6
    cvelistv5