High severity · published Oct 1, 2026
CVE-2026-102294
Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration
8.5
CVSS
0.9%
EPSS
No
On KEV
Description
TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands.
Successful exploitation may allow unauthorized access to sensitive information, modification of device configuration or services, and disruption of device operation.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TV
TL-WR841N v14 · TP-Link System Inc.
before 4.19 Build 260821 (EN); before 4.19 Build 260820 (US) · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-102294
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-102294
patch
https://www.tp-link.com/en/support/download/tl-wr841n/v14/#Firmware
patch
https://www.tp-link.com/us/support/download/tl-wr841n/v14/#Firmware
vendor-advisory
https://www.tp-link.com/us/support/faq/5320/
More from TL-WR841N v14
5.3
CVE-2026-76651
Pre-Authentication Multipart Boundary Buffer Overflow in HTTP Service in TP-Link TL-WR841N
5.3
CVE-2026-76650
Pre-Authentication NULL Pointer Dereference in UPnP SOAP State Variable Query Processing in TP-Link TL-WR841N
5.3
CVE-2026-76649
Pre-Authentication NULL Pointer Dereference in UPnP SOAP Action Request Processing in TP-Link TL-WR841N