Tl-wr841n Firmware vulnerabilities | LiveThreat CVE Feed

Product

Tl-wr841n Firmware

by Tp-link · last CVE Jun 29, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities39 In the news1 Timeline

Severity mix

Critical 4High 27Medium 5Low 0

Severity

All severities39 Critical4 High27 Medium5 Low0

Exploitation

On CISA KEV4 Exploited in the wild4

Watch

Add Tl-wr841n Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-33538 In wildKEV	8.8	42%	Jun 7	TP-Link Multiple Routers Command Injection Vulnerability Affected: All versions, or not specified
CVE-2015-3035 In wildKEV	7.5	84%	Apr 17	TP-Link Multiple Archer Devices Directory Traversal Vulnerability Affected: before 150310; before 150310
CVE-2025-9377 In wildKEV	7.2	38%	Aug 29	Authenticated RCE via Parental Control command injection Affected: before 241108
CVE-2026-5039	8.8	0%	Apr 23	Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N Affected: before 231120
CVE-2023-39471	8.8	1%	May 3	TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability Affected: before 231119
CVE-2023-36489	8.8	1%	Sep 6	Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands Affected: before 230506
CVE-2022-46912	8.8	1%	Dec 20	An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via… Affected: through 3.13.9
CVE-2022-30024	8.8	2%	Jul 14	A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET… Affected: 3.16.9; 150616; 150310
CVE-2020-35576	8.8	42%	Jan 26	A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as… Affected: before 201216
CVE-2019-17147	8.8	14%	Jan 7	This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers Affected: 0.9.1_4.16
CVE-2018-12577	8.8	3%	Jul 2	The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection Affected: 0.9.1_4.16
CVE-2018-12574	8.8	0%	Jul 2	CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices Affected: 0.9.1_4.16
CVE-2023-33537	8.1	1%	Jun 7	TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm Affected: All versions, or not specified
CVE-2023-33536	8.1	1%	Jun 7	TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm Affected: All versions, or not specified
CVE-2023-36358	7.7	1%	Jun 22	TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm Affected: All versions, or not specified
CVE-2023-36357	7.7	1%	Jun 22	An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service (DoS) via… Affected: All versions, or not specified
CVE-2023-36356	7.7	1%	Jun 22	TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm Affected: All versions, or not specified
CVE-2026-3622	7.5	0%	Mar 26	Denial-of-Service Vulnerability in UPnP Component of TP Link's TL-WR841N Affected: before 0.9.1_4.19
CVE-2025-9014	7.5	1%	Jan 15	Null Pointer Dereference Vulnerability on TL-WR841N Affected: before 250908
CVE-2025-53715	7.5	0%	Jul 29	A vulnerability has been found in TP-Link TL-WR841N V11 Affected: through 160325
CVE-2025-53714	7.5	0%	Jul 29	A vulnerability has been found in TP-Link TL-WR841N V11 Affected: through 160325
CVE-2025-53713	7.5	0%	Jul 29	A vulnerability has been found in TP-Link TL-WR841N V11 Affected: through 160325
CVE-2025-53712	7.5	0%	Jul 29	A vulnerability has been found in TP-Link TL-WR841N V11 Affected: through 160325
CVE-2025-53711	7.5	0%	Jul 29	A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3 Affected: through 160325
CVE-2023-36359	7.5	1%	Jun 22	TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm Affected: All versions, or not specified
CVE-2023-36354	7.5	1%	Jun 22	TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component… Affected: All versions, or not specified
CVE-2020-8423	7.2	9%	Apr 2	A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET… Affected: 3.16.9