CVE-2026-9105CWE-121

Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web Interface

Medium · published June 29, 2026

CVSS v4.0
6.8
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14. A remote authenticated attacker can send crafted HTTP requests to cause the embedded web server to overflow a stack buffer, resulting in a crash of the affected process.

Successful exploitation results in a denial-of-service condition, causing the device to crash and automatically reboot.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.01118 · 65.8th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-06-29T16:05Z
EPSS history
Timeline
  • 29 JUN 16:05Z
    Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web Interface
    cvelistv5