CVE-2026-76650CWE-476

CVE-2026-76650

published August 29, 2026

CVSS
5.3
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

A NULL

pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing

SOAP state variable query requests. A specially crafted SOAP query may trigger

unexpected termination or instability of the process hosting the UPnP service.

Successful

exploitation may result in a denial-of-service condition affecting UPnP

discovery, state query, or related management functionality until the affected

process is restarted or the device is rebooted.

The record
Technical detail
CVSS
5.3 · NONE
CVSS v4.0
5.3 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00268 · 17.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-08-29T02:16Z
References (3)
https://www.tp-link.com/en/support/download/tl-wr841n/v14/#Firmware · f23511db-6c3e-4e32-a477-6aa17d310630https://www.tp-link.com/us/support/download/tl-wr841n/v14/#Firmware · f23511db-6c3e-4e32-a477-6aa17d310630https://www.tp-link.com/us/support/faq/5270/ · f23511db-6c3e-4e32-a477-6aa17d310630
EPSS history
Timeline
  • 30 AUG 16:19Z
    EPSS moved — → 0%
    epss
  • 28 AUG 20:19Z
    Pre-Authentication NULL Pointer Dereference in UPnP SOAP State Variable Query Processing in TP-Link TL-WR841N
    cvelistv5