Login Request a demo
TF
Product
Tl-wr840n Firmware
by Tp-link · last CVE Mar 13, 2026
On CISA KEVExploited in the wild
22
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 6High 10Medium 5Low 0
Severity
All severities22Critical6High10Medium5Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Tl-wr840n Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-25064
9.8
36%
Feb 25
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr
Affected: 6.20_180709
CVE-2022-25061
9.8
59%
Feb 25
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute
Affected: 6.20_180709
CVE-2022-25060
9.8
40%
Feb 25
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing
Affected: 6.20_180709
CVE-2021-41653
9.8
76%
Nov 13
The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address…
Affected: through tl-wr840n\(eu\)_v5_171211
CVE-2020-36178
9.8
10%
Jan 6
oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command injection because a raw string entered from the web interface (an IP address field)…
Affected: 6_eu_0.9.1_4.16
CVE-2018-11714
9.8
67%
Jun 4
An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices
Affected: 0.9.1_3.16
Showing 6