Summary
TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
- Vendor
- TP-Link
- Product
- TL-WR841N
- Added to KEV
- Sep 3, 2025
- Remediation due
- Sep 24, 2025 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-290
- EPSS
- 20.0% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References