Login Request a demo
TF
Product
Tl-wr841n Firmware
by Tp-link · last CVE Jun 29, 2026
On CISA KEVExploited in the wild
39
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities39In the news1Timeline
Severity mix
Critical 4High 27Medium 5Low 0
Severity
All severities39Critical4High27Medium5Low0
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Tl-wr841n Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33538
In wildKEV
8.8
42%
Jun 7
TP-Link Multiple Routers Command Injection Vulnerability
Affected: All versions, or not specified
CVE-2015-3035
In wildKEV
7.5
84%
Apr 17
TP-Link Multiple Archer Devices Directory Traversal Vulnerability
Affected: before 150310; before 150310
CVE-2025-9377
In wildKEV
7.2
38%
Aug 29
Authenticated RCE via Parental Control command injection
Affected: before 241108
CVE-2023-50224
In wildKEV
6.5
20%
May 3
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
Affected: 11_150616 before 11_211209; 12_160624 before 12_230317
CVE-2022-25073
9.8
13%
Feb 24
TL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function dm_fillObjByStr()
Affected: 0.9.1_4.18
CVE-2022-0162
9.8
1%
Feb 9
The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in cleartextbase64 format
Affected: 3.16.9
CVE-2018-12575
9.8
3%
Jul 2
On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request
Affected: 0.9.1_4.16
CVE-2018-11714
9.8
67%
Jun 4
An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices
Affected: 0.9.1_4.16
CVE-2026-5039
8.8
0%
Apr 23
Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N
Affected: before 231120
CVE-2023-39471
8.8
1%
May 3
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability
Affected: before 231119
CVE-2023-36489
8.8
1%
Sep 6
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands
Affected: before 230506
CVE-2022-46912
8.8
1%
Dec 20
An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via…
Affected: through 3.13.9
CVE-2022-30024
8.8
2%
Jul 14
A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET…
Affected: 3.16.9; 150616; 150310
CVE-2020-35576
8.8
42%
Jan 26
A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as…
Affected: before 201216
CVE-2019-17147
8.8
14%
Jan 7
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers
Affected: 0.9.1_4.16
CVE-2018-12577
8.8
3%
Jul 2
The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection
Affected: 0.9.1_4.16
CVE-2018-12574
8.8
0%
Jul 2
CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices
Affected: 0.9.1_4.16
CVE-2023-33537
8.1
1%
Jun 7
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm
Affected: All versions, or not specified
CVE-2023-33536
8.1
1%
Jun 7
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm
Affected: All versions, or not specified
CVE-2023-36358
7.7
1%
Jun 22
TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm
Affected: All versions, or not specified
CVE-2023-36357
7.7
1%
Jun 22
An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service (DoS) via…
Affected: All versions, or not specified
CVE-2023-36356
7.7
1%
Jun 22
TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm
Affected: All versions, or not specified
CVE-2026-3622
7.5
0%
Mar 26
The vulnerability exists in the UPnP component of TL-WR841N v14, where improper input validation leads to an out-of-bounds read, potentially causing a crash of the UPnP service
Affected: before 0.9.1_4.19
CVE-2025-9014
7.5
1%
Jan 15
A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation.  A remote,…
Affected: before 250908
CVE-2025-53715
7.5
0%
Jul 29
A vulnerability has been found in TP-Link TL-WR841N V11
Affected: through 160325
CVE-2025-53714
7.5
0%
Jul 29
A vulnerability has been found in TP-Link TL-WR841N V11
Affected: through 160325
CVE-2025-53713
7.5
0%
Jul 29
A vulnerability has been found in TP-Link TL-WR841N V11
Affected: through 160325
CVE-2025-53712
7.5
0%
Jul 29
A vulnerability has been found in TP-Link TL-WR841N V11
Affected: through 160325
CVE-2025-53711
7.5
0%
Jul 29
A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3
Affected: through 160325
CVE-2023-36359
7.5
1%
Jun 22
TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm
Affected: All versions, or not specified
CVE-2023-36354
7.5
1%
Jun 22
TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component…
Affected: All versions, or not specified
CVE-2020-8423
7.2
9%
Apr 2
A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET…
Affected: 3.16.9
CVE-2026-3227
6.8
2%
Mar 16
A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command
Affected: before 260303
CVE-2026-9105
6.5
1%
Jun 29
Authenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web Interface
Affected: before 14_260518
CVE-2022-42202
6.1
1%
Oct 18
TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS)
Affected: 4.17.16_build_120201_rel.54750n
CVE-2018-12576
4.3
1%
Jul 2
TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking
Affected: 0.9.1_4.16
CVE-2012-6316
–
1%
Sep 30
Multiple cross-site scripting (XSS) vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote administrators to inject…
Affected: through 3.13.9
CVE-2012-6276
–
4%
Jan 26
Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote…
Affected: 3.13.9
CVE-2012-5687
–
69%
Nov 1
Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote…
Affected: through 3.13.9
Showing 39