All vulnerabilities
CVE-2026-102294

Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration

TP-Link System Inc. TL-WR841N v14Network & edge
Open in ThreatlineRecord JSON
CVSS
8.5High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.92%Chance of exploitation activity in the next 30 days, higher than 60% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in4.19 Build 260821 (EN)Also 4.19 Build 260820 (US)CVE List
Published1 Oct 2026Updated 2 Oct 2026CVE List

What fixes it

  • 4.19 Build 260821 (EN)TL-WR841N v14CVE List
  • 4.19 Build 260820 (US)TL-WR841N v14CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands.

Successful exploitation may allow unauthorized access to sensitive information, modification of device configuration or services, and disruption of device operation.

Text from CVE List

Affected versions 2

  • TL-WR841N v14affected: all versions before 4.19 Build 260821 (EN)CVE List
  • TL-WR841N v14affected: all versions before 4.19 Build 260820 (US)CVE List

References 3