Vulnerability · Published Jun 29, 2026 · Assigned by TPLink

CVE-2026-9105Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web Interface

Medium 6.8

In plain English

A medium-severity stack buffer overflow in TL-WR841N v14 from TP-Link Systems Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).

Severity (CVSS 4.0)6.8Medium

Exploit odds (30 days)1.1%top 33.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14. A remote authenticated attacker can send crafted HTTP requests to cause the embedded web server to overflow a stack buffer, resulting in a crash of the affected process. Successful exploitation results in a denial-of-service condition, causing the device to crash and automatically reboot.

Affected products (as reported)

Vendor	Product	Versions
TP-Link Systems Inc.	TL-WR841N v14	0 – before V14_260518

Weakness: CWE-121 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

In plain English

Official description

Affected products (as reported)

References