Login Request a demo
TF
Product
Tl-wr840n Firmware
by Tp-link · last CVE Mar 16, 2026
On CISA KEVExploited in the wild
22
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 6High 10Medium 5Low 0
Severity
All severities22Critical6High10Medium5Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Tl-wr840n Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-50224
In wildKEV
6.5
20%
May 3
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2022-25064
9.8
36%
Feb 25
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr
Affected: 6.20_180709
CVE-2022-25061
9.8
59%
Feb 25
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute
Affected: 6.20_180709
CVE-2022-25060
9.8
40%
Feb 25
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing
Affected: 6.20_180709
CVE-2021-41653
9.8
76%
Nov 13
The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address…
Affected: through tl-wr840n\(eu\)_v5_171211
CVE-2020-36178
9.8
10%
Jan 6
oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command injection because a raw string entered from the web interface (an IP address field)…
Affected: 6_eu_0.9.1_4.16
CVE-2018-11714
9.8
67%
Jun 4
An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices
Affected: 0.9.1_3.16
CVE-2023-39471
8.8
1%
May 3
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability
Affected: before 231121
CVE-2019-15060
8.8
4%
Aug 22
The traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1 3.16 is vulnerable to remote code execution via a crafted payload in an IP address input…
Affected: through 0.9.1_3.16
CVE-2022-25062
7.5
4%
Feb 25
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString
Affected: 6.20_180709
CVE-2018-15840
7.5
2%
Mar 29
TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets, as demonstrated by an "nmap -f" command
Affected: All versions, or not specified
CVE-2018-15172
7.5
8%
Aug 15
TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header
Affected: 0.9.1
CVE-2021-46122
7.2
2%
Apr 18
Tp-Link TL-WR840N (EU) v6.20 Firmware (0.9.1 4.17 v0001.0 Build 201124 Rel.64328n) is vulnerable to Buffer Overflow via the Password reset feature
Affected: 0.9.1_4.17_v0001.0
CVE-2022-26642
7.2
1%
Mar 28
TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter
Affected: 0.9.1.4.16
CVE-2022-26641
7.2
1%
Mar 28
TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter
Affected: 0.9.1.4.16
CVE-2022-26640
7.2
1%
Mar 28
TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter
Affected: 0.9.1.4.16
CVE-2022-26639
7.2
1%
Mar 28
TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter
Affected: 0.9.1.4.16
CVE-2026-3227
6.8
2%
Mar 16
A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command
Affected: before 260304
CVE-2022-29402
6.8
0%
May 25
TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console
Affected: All versions, or not specified
CVE-2021-29280
6.4
1%
Aug 19
In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow
Affected: All versions, or not specified
CVE-2019-12195
4.8
2%
May 24
TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name
Affected: 0.9.1_3.16
CVE-2014-9510
–
1%
Jan 9
Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141120 allows remote attackers to…
Affected: 3.13.27
Showing 22