CVE-2026-76650

Medium

Description

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in a denial-of-service condition affecting UPnP discovery, state query, or related management functionality until the affected process is restarted or the device is rebooted.

SeverityMedium

CVSS5.3

Exploit probability—

ProductTL-WR841N v14

PublishedAug 28, 2026

First seenAug 28, 2026

Weakness typeCWE-476NULL pointer dereference

How to fix

Update

TP-Link System Inc. TL-WR841N v14TL-WR841N(US)_V14_4.19 Build 260820 Rel.33478, TL-WR841N(EU)_V14_4.19 Build 260821 Rel.56588 or later

Patches

Vendor advisories

tp-link.com/us/support/faq/5270/

Affected products

Product	Affected versions	Fixed in
TP-Link System Inc. TL-WR841N v14	v < TL-WR841N(US)_V14_4.19 Build 260820 Rel.33478, v < TL-WR841N(EU)_V14_4.19 Build 260821 Rel.56588	TL-WR841N(US)_V14_4.19 Build 260820 Rel.33478, TL-WR841N(EU)_V14_4.19 Build 260821 Rel.56588

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.